Commit Graph
28 Commits
Author SHA1 Message Date
ahmza a5f4041d47 Add encrypted Cloudflare API token for cert-manager 2026-09-03 04:07:53 +00:00
ahmza 4affbaf973 Add cert-manager with Cloudflare DNS-01 ClusterIssuers 2026-09-03 05:03:10 +01:00
ahmza e6a42a39a8 Reclaim demo's former dedicated address in network map 2026-09-03 04:57:47 +01:00
ahmza bb69db8041 Route demo app through Ingress at demo.ahmza.com 2026-09-03 04:44:41 +01:00
ahmza 923cdd5162 Add ingress-nginx 2026-09-03 04:37:04 +01:00
ahmza 4fe5a921ff Remove SOPS pipeline test secret 2026-09-03 03:34:53 +00:00
ahmza 2ca52e4829 Move test secret into Helm templates/ so Argo CD actually applies it 2026-09-03 03:33:51 +00:00
ahmza 095e7b3244 Add end-to-end SOPS pipeline test secret 2026-09-03 03:32:41 +00:00
ahmza 7e9406dff0 Fix .sops.yaml to scope encryption to secret payload fields only 2026-09-03 04:31:03 +01:00
ahmza 0a733a7d76 Add SOPS+age secrets pipeline 2026-09-03 04:24:38 +01:00
ahmza 41dfd195a1 Align 09-growing-up with actual control-plane/worker split 2026-09-03 04:01:12 +01:00
ahmza c34b58e0b2 Add cascade-delete finalizer to stateless apps; document the distinction 2026-09-03 03:58:47 +01:00
ahmza 8037f24e82 delete whoami 2026-09-03 02:56:28 +00:00
ahmza f5cb20ad6b Add whoami as a second real app (docs/08 hands-on exercise) 2026-09-03 03:52:11 +01:00
ahmza 574d3032db Align 08-adding-new-apps with Gitea repo and Pod Security lesson 2026-09-03 03:50:43 +01:00
ahmza b45a633b99 update the demo page header 2026-09-03 02:39:15 +00:00
ahmza a8d26a946f Fix Longhorn default StorageClass to actually use 2 replicas 2026-09-03 03:33:14 +01:00
ahmza 170ef2d116 Give demo app a real Longhorn-backed PVC 2026-09-03 03:29:28 +01:00
ahmza 39e04e43d0 Update Longhorn docs for two-worker topology 2026-09-03 03:28:13 +01:00
ahmza 9bb29eee5a Allow Longhorn's privileged storage Pods via namespace Pod Security labels 2026-09-03 03:09:39 +01:00
ahmza 49d3f5c092 Fix BGPPeer nodeSelector to match empty-string node-role label convention 2026-09-03 03:04:17 +01:00
ahmza 3d2aea2d1f Allow MetalLB's privileged networking Pods via namespace Pod Security labels 2026-09-03 02:37:13 +01:00
ahmza 502de4fdf0 Configure MetalLB BGP service network 2026-09-03 02:19:46 +01:00
ahmza 4cb6bc9ec4 Persist worker and Longhorn node labels 2026-09-03 02:00:24 +01:00
ahmza b6f8f36c5b Point Argo CD at Gitea and configure storage workers 2026-09-03 01:54:37 +01:00
ahmza a5ddf11992 Adapt Talos config for five-node mixed architecture cluster 2026-09-02 22:50:34 +01:00
Maxwell MorrisandClaude Sonnet 5 110bd97cca Move to a three-node cluster with a Talos VIP; add Longhorn
Every node is now both control plane and worker, giving real tolerance
for losing any single machine (etcd quorum needs 3, not 1). A Talos VIP
gives the cluster one stable address regardless of which node answers.

Also pre-installs Longhorn for replicated storage, backed by a Talos
UserVolume on each node's second disk (>=900GB, non-system) rather than
the default path — mirroring the pattern from the homescale repo.

Docs renumbered to make room for 06-longhorn.md; checklist, glossary,
network map, and CLAUDE.md's guided-bootstrap instructions updated to
match, including asking the user for node IPs, VIP, and disk info before
generating any Talos config.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-22 18:25:38 +01:00
Maxwell MorrisandClaude Sonnet 5 92c3ad3191 Initial commit: GitOps Starter Pack
A teaching-first, single-cluster GitOps setup: Talos Linux + Argo CD with
an app-of-apps layout, MetalLB pre-installed for real LoadBalancer IPs on
bare metal, a demo app, and a progressive docs/ walkthrough with a
CLAUDE.md tutor persona and guided bootstrap checklist.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-22 17:30:45 +01:00