Damien/iac-homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update .gitignore, enhance README formatting, and remove obsolete AWX Kubernetes configurations

Browse Source
This commit is contained in:
Damien Arnodo
2025-10-05 10:51:38 +02:00
parent bc0c9dd450
commit 87d357fcb1
7 changed files with 22 additions and 96 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
.gitignore vendored
View File

@@ -18,3 +18,4 @@ static_records.yml
.ansible
.env
.venv
.envrc

42
README.md
View File

@@ -91,12 +91,12 @@ pveum user token add terraform@pve terraform -expire 0 -privsep 0
Créer des templates sur Proxmox avec les tags suivants :
| OS | Tags requis |
|---|---|
| OS | Tags requis |
| ------ | ------------------------ |
| Ubuntu | `["ubuntu", "template"]` |
| Debian | `["debian", "template"]` |
| Alpine | `["alpine", "template"]` |
| Rocky | `["rocky", "template"]` |
| Rocky | `["rocky", "template"]` |
| CentOS | `["centos", "template"]` |
### 3. Configuration Tailscale
@@ -367,12 +367,12 @@ kubectl logs -n awx -l app.kubernetes.io/name=awx
### Dépannage courant
| Problème | Solution |
|---|---|
| Certificat HTTPS non généré | Vérifier les annotations Tailscale et les permissions OAuth |
| Service non accessible | Vérifier l'ingress et le service backend |
| AWX non fonctionnel | Vérifier les PVC et les secrets de configuration |
| EE sans accès réseau | Configurer ProxyClass ou privilèges selon l'approche choisie |
| Problème | Solution |
| --------------------------- | ------------------------------------------------------------ |
| Certificat HTTPS non généré | Vérifier les annotations Tailscale et les permissions OAuth |
| Service non accessible | Vérifier l'ingress et le service backend |
| AWX non fonctionnel | Vérifier les PVC et les secrets de configuration |
| EE sans accès réseau | Configurer ProxyClass ou privilèges selon l'approche choisie |
## Configuration avancée
@@ -396,21 +396,21 @@ spec:
### Autres services recommandés
| Service | Description | URL |
|---|---|---|
| Grafana | Monitoring et dashboards | `https://grafana.taila5ad8.ts.net` |
| Prometheus | Métriques | `https://prometheus.taila5ad8.ts.net` |
| ArgoCD | GitOps | `https://argocd.taila5ad8.ts.net` |
| Longhorn | Stockage | `https://longhorn.taila5ad8.ts.net` |
| Service | Description | URL |
| ---------- | ------------------------ | ------------------------------------- |
| Grafana | Monitoring et dashboards | `https://grafana.taila5ad8.ts.net` |
| Prometheus | Métriques | `https://prometheus.taila5ad8.ts.net` |
| ArgoCD | GitOps | `https://argocd.taila5ad8.ts.net` |
| Longhorn | Stockage | `https://longhorn.taila5ad8.ts.net` |
## Ressources recommandées
| Type de service | CPU | RAM | Disque |
|---|---|---|---|
| K8s Master | 4+ | 8GB+ | 50GB+ |
| AWX | 2 | 4GB | 20GB |
| Monitoring | 2 | 4GB | 30GB |
| Applications | 2+ | 2GB+ | 20GB+ |
| Type de service | CPU | RAM | Disque |
| --------------- | --- | ---- | ------ |
| K8s Master | 4+ | 8GB+ | 50GB+ |
| AWX | 2 | 4GB | 20GB |
| Monitoring | 2 | 4GB | 30GB |
| Applications | 2+ | 2GB+ | 20GB+ |
## Support et références

1
k8s/aws/awx-operator

Submodule k8s/aws/awx-operator deleted from 1c3c5d430d

25
k8s/awx/awx-cr.yml
View File

@@ -1,25 +0,0 @@
apiVersion: awx.ansible.com/v1beta1
kind: AWX
metadata:
name: awx
namespace: awx
spec:
# Ajuste ces valeurs selon ta version & ressources
postgres_configuration_secret: awx-postgres-configuration
postgres_storage_class: local-path
postgres_storage_requirements:
requests:
storage: 8Gi
projects_persistence: true
projects_existing_claim: awx-projects-claim
# important: pas d'exposition publique
service_type: ClusterIP
ingress_type: none
# Job pods puissent être privilégiés
# (Necessaire avec tailscale dans les EE)
task_privileged: true
image: quay.io/ansible/awx
image_version: "latest"

12
k8s/awx/awx-pvc.yml
View File

@@ -1,12 +0,0 @@
# awx-pvc.yml
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: awx-projects-claim
namespace: awx
spec:
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 12Gi
storageClassName: local-path

18
k8s/awx/tailscale-ingress.yml
View File

@@ -1,18 +0,0 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: awx-tailscale-ingress
namespace: awx
annotations:
tailscale.com/expose: "true"
tailscale.com/hostname: "awx"
spec:
ingressClassName: tailscale
defaultBackend:
service:
name: awx-service
port:
number: 80
tls:
- hosts:
- awx.taila5ad8.ts.net

19
terraform/prod/.terraform.lock.hcl generated
View File

@@ -22,22 +22,3 @@ provider "registry.terraform.io/bpg/proxmox" {
"zh:ff79ccc3535cce0aa00e77f2c3979ef492b9aa611aee643aadb104cffd591c46",
]
}
provider "registry.terraform.io/hashicorp/local" {
version = "2.5.3"
hashes = [
"h1:MCzg+hs1/ZQ32u56VzJMWP9ONRQPAAqAjuHuzbyshvI=",
"zh:284d4b5b572eacd456e605e94372f740f6de27b71b4e1fd49b63745d8ecd4927",
"zh:40d9dfc9c549e406b5aab73c023aa485633c1b6b730c933d7bcc2fa67fd1ae6e",
"zh:6243509bb208656eb9dc17d3c525c89acdd27f08def427a0dce22d5db90a4c8b",
"zh:78d5eefdd9e494defcb3c68d282b8f96630502cac21d1ea161f53cfe9bb483b3",
"zh:885d85869f927853b6fe330e235cd03c337ac3b933b0d9ae827ec32fa1fdcdbf",
"zh:bab66af51039bdfcccf85b25fe562cbba2f54f6b3812202f4873ade834ec201d",
"zh:c505ff1bf9442a889ac7dca3ac05a8ee6f852e0118dd9a61796a2f6ff4837f09",
"zh:d36c0b5770841ddb6eaf0499ba3de48e5d4fc99f4829b6ab66b0fab59b1aaf4f",
"zh:ddb6a407c7f3ec63efb4dad5f948b54f7f4434ee1a2607a49680d494b1776fe1",
"zh:e0dafdd4500bec23d3ff221e3a9b60621c5273e5df867bc59ef6b7e41f5c91f6",
"zh:ece8742fd2882a8fc9d6efd20e2590010d43db386b920b2a9c220cfecc18de47",
"zh:f4c6b3eb8f39105004cf720e202f04f57e3578441cfb76ca27611139bc116a82",
]
}