Commit Graph
3 Commits
Author SHA1 Message Date
k.rennerandClaude Opus 4.6 46358b722e fix: Split infrastructure into stages for CRD dependency ordering
FluxCD dry-run fails when CRD-dependent resources (ClusterIssuer,
CephCluster) are in the same Kustomization as the HelmReleases that
install those CRDs. Split into 3 stages:

1. infrastructure/ - namespaces, HelmReleases (installs CRDs)
2. post-crds/ - ClusterIssuer (needs cert-manager CRDs)
3. rook-ceph-cluster/ - CephCluster, StorageClasses (needs Rook CRDs)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-04 11:47:55 +02:00
k.rennerandClaude Opus 4.6 918e4ae2ea feat: Update FluxCD manifests with validated infrastructure configs
Lessons from manual validation run:
- Add privileged PodSecurity labels to metallb-system, rook-ceph, ingress namespaces
- Add Cilium HelmRelease with Talos-specific settings (cgroup, kubePrism)
- Consolidate all namespace definitions in namespaces/
- Update cert-manager to use crds.enabled instead of installCRDs
- Enable all infrastructure components in main kustomization
- Add Talos secrets to .gitignore (controlplane.yaml, talosconfig)
- Update node patches with correct install disk (vda) and zone labels

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-04 11:11:25 +02:00
k.rennerandClaude Opus 4.6 0373184f19 feat: Add Kubernetes migration scaffolding (Phase 0)
ci/woodpecker/push/deploy-infrastructure Pipeline was successful
ci/woodpecker/manual/deploy-infrastructure Pipeline failed
ci/woodpecker/push/security-scan Pipeline was successful
Add Talos Linux K8s cluster infrastructure for gradual migration from
Proxmox VMs/LXCs to Kubernetes. Creates 3 control plane VMs (one per
Proxmox node) and FluxCD-managed infrastructure manifests.

OpenTofu: 3 Talos VMs (VMID 150-152, 8 cores, 24GB RAM, 32GB OS + 500GB Ceph disk)
Talos: Control plane config template with per-node patches (10.2.40.210-212)
FluxCD: Cluster entrypoint with infrastructure and apps Kustomizations
Infrastructure: MetalLB, cert-manager, ingress-nginx, Rook-Ceph,
  CloudNativePG, Sealed Secrets manifests

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-04 09:49:44 +02:00