diff --git a/.gitignore b/.gitignore index 1e70d43..00057d1 100644 --- a/.gitignore +++ b/.gitignore @@ -18,3 +18,4 @@ static_records.yml .ansible .env .venv +.envrc diff --git a/README.md b/README.md index 59ff749..6c57696 100644 --- a/README.md +++ b/README.md @@ -91,12 +91,12 @@ pveum user token add terraform@pve terraform -expire 0 -privsep 0 Créer des templates sur Proxmox avec les tags suivants : -| OS | Tags requis | -|---|---| +| OS | Tags requis | +| ------ | ------------------------ | | Ubuntu | `["ubuntu", "template"]` | | Debian | `["debian", "template"]` | | Alpine | `["alpine", "template"]` | -| Rocky | `["rocky", "template"]` | +| Rocky | `["rocky", "template"]` | | CentOS | `["centos", "template"]` | ### 3. Configuration Tailscale @@ -367,12 +367,12 @@ kubectl logs -n awx -l app.kubernetes.io/name=awx ### Dépannage courant -| Problème | Solution | -|---|---| -| Certificat HTTPS non généré | Vérifier les annotations Tailscale et les permissions OAuth | -| Service non accessible | Vérifier l'ingress et le service backend | -| AWX non fonctionnel | Vérifier les PVC et les secrets de configuration | -| EE sans accès réseau | Configurer ProxyClass ou privilèges selon l'approche choisie | +| Problème | Solution | +| --------------------------- | ------------------------------------------------------------ | +| Certificat HTTPS non généré | Vérifier les annotations Tailscale et les permissions OAuth | +| Service non accessible | Vérifier l'ingress et le service backend | +| AWX non fonctionnel | Vérifier les PVC et les secrets de configuration | +| EE sans accès réseau | Configurer ProxyClass ou privilèges selon l'approche choisie | ## Configuration avancée @@ -396,21 +396,21 @@ spec: ### Autres services recommandés -| Service | Description | URL | -|---|---|---| -| Grafana | Monitoring et dashboards | `https://grafana.taila5ad8.ts.net` | -| Prometheus | Métriques | `https://prometheus.taila5ad8.ts.net` | -| ArgoCD | GitOps | `https://argocd.taila5ad8.ts.net` | -| Longhorn | Stockage | `https://longhorn.taila5ad8.ts.net` | +| Service | Description | URL | +| ---------- | ------------------------ | ------------------------------------- | +| Grafana | Monitoring et dashboards | `https://grafana.taila5ad8.ts.net` | +| Prometheus | Métriques | `https://prometheus.taila5ad8.ts.net` | +| ArgoCD | GitOps | `https://argocd.taila5ad8.ts.net` | +| Longhorn | Stockage | `https://longhorn.taila5ad8.ts.net` | ## Ressources recommandées -| Type de service | CPU | RAM | Disque | -|---|---|---|---| -| K8s Master | 4+ | 8GB+ | 50GB+ | -| AWX | 2 | 4GB | 20GB | -| Monitoring | 2 | 4GB | 30GB | -| Applications | 2+ | 2GB+ | 20GB+ | +| Type de service | CPU | RAM | Disque | +| --------------- | --- | ---- | ------ | +| K8s Master | 4+ | 8GB+ | 50GB+ | +| AWX | 2 | 4GB | 20GB | +| Monitoring | 2 | 4GB | 30GB | +| Applications | 2+ | 2GB+ | 20GB+ | ## Support et références diff --git a/k8s/aws/awx-operator b/k8s/aws/awx-operator deleted file mode 160000 index 1c3c5d4..0000000 --- a/k8s/aws/awx-operator +++ /dev/null @@ -1 +0,0 @@ -Subproject commit 1c3c5d430d5ddd0e5edb6366352d1b04bce5d537 diff --git a/k8s/awx/awx-cr.yml b/k8s/awx/awx-cr.yml deleted file mode 100644 index a84032f..0000000 --- a/k8s/awx/awx-cr.yml +++ /dev/null @@ -1,25 +0,0 @@ -apiVersion: awx.ansible.com/v1beta1 -kind: AWX -metadata: - name: awx - namespace: awx -spec: - # Ajuste ces valeurs selon ta version & ressources - postgres_configuration_secret: awx-postgres-configuration - postgres_storage_class: local-path - postgres_storage_requirements: - requests: - storage: 8Gi - projects_persistence: true - projects_existing_claim: awx-projects-claim - - # important: pas d'exposition publique - service_type: ClusterIP - ingress_type: none - - # Job pods puissent être privilégiés - # (Necessaire avec tailscale dans les EE) - task_privileged: true - - image: quay.io/ansible/awx - image_version: "latest" diff --git a/k8s/awx/awx-pvc.yml b/k8s/awx/awx-pvc.yml deleted file mode 100644 index 76c3b8e..0000000 --- a/k8s/awx/awx-pvc.yml +++ /dev/null @@ -1,12 +0,0 @@ -# awx-pvc.yml -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: awx-projects-claim - namespace: awx -spec: - accessModes: ["ReadWriteOnce"] - resources: - requests: - storage: 12Gi - storageClassName: local-path diff --git a/k8s/awx/tailscale-ingress.yml b/k8s/awx/tailscale-ingress.yml deleted file mode 100644 index c5986a8..0000000 --- a/k8s/awx/tailscale-ingress.yml +++ /dev/null @@ -1,18 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - name: awx-tailscale-ingress - namespace: awx - annotations: - tailscale.com/expose: "true" - tailscale.com/hostname: "awx" -spec: - ingressClassName: tailscale - defaultBackend: - service: - name: awx-service - port: - number: 80 - tls: - - hosts: - - awx.taila5ad8.ts.net diff --git a/terraform/prod/.terraform.lock.hcl b/terraform/prod/.terraform.lock.hcl index f49a281..d35f2be 100644 --- a/terraform/prod/.terraform.lock.hcl +++ b/terraform/prod/.terraform.lock.hcl @@ -22,22 +22,3 @@ provider "registry.terraform.io/bpg/proxmox" { "zh:ff79ccc3535cce0aa00e77f2c3979ef492b9aa611aee643aadb104cffd591c46", ] } - -provider "registry.terraform.io/hashicorp/local" { - version = "2.5.3" - hashes = [ - "h1:MCzg+hs1/ZQ32u56VzJMWP9ONRQPAAqAjuHuzbyshvI=", - "zh:284d4b5b572eacd456e605e94372f740f6de27b71b4e1fd49b63745d8ecd4927", - "zh:40d9dfc9c549e406b5aab73c023aa485633c1b6b730c933d7bcc2fa67fd1ae6e", - "zh:6243509bb208656eb9dc17d3c525c89acdd27f08def427a0dce22d5db90a4c8b", - "zh:78d5eefdd9e494defcb3c68d282b8f96630502cac21d1ea161f53cfe9bb483b3", - "zh:885d85869f927853b6fe330e235cd03c337ac3b933b0d9ae827ec32fa1fdcdbf", - "zh:bab66af51039bdfcccf85b25fe562cbba2f54f6b3812202f4873ade834ec201d", - "zh:c505ff1bf9442a889ac7dca3ac05a8ee6f852e0118dd9a61796a2f6ff4837f09", - "zh:d36c0b5770841ddb6eaf0499ba3de48e5d4fc99f4829b6ab66b0fab59b1aaf4f", - "zh:ddb6a407c7f3ec63efb4dad5f948b54f7f4434ee1a2607a49680d494b1776fe1", - "zh:e0dafdd4500bec23d3ff221e3a9b60621c5273e5df867bc59ef6b7e41f5c91f6", - "zh:ece8742fd2882a8fc9d6efd20e2590010d43db386b920b2a9c220cfecc18de47", - "zh:f4c6b3eb8f39105004cf720e202f04f57e3578441cfb76ca27611139bc116a82", - ] -}