Merge branch 'main' into flux-opertor

onedr0p · Dec 29, 2024 · 2337aec · 2337aec
2 parents b953b31 + fc1abdb
commit 2337aec
Show file tree

Hide file tree

Showing 8 changed files with 48 additions and 33 deletions.
diff --git a/.github/workflows/flux-diff.yaml b/.github/workflows/flux-diff.yaml
@@ -5,7 +5,10 @@ name: "Flux Diff"
 on:
   pull_request:
     branches: ["main"]
-    paths: ["kubernetes/**"]
+    paths:
+      - kubernetes/main/apps/**
+      - kubernetes/main/flux/**
+      - kubernetes/shared/**
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.number || github.ref }}

diff --git a/.github/workflows/helm-repository-sync.yaml b/.github/workflows/helm-repository-sync.yaml
@@ -63,12 +63,12 @@ jobs:
           for r in "${repos[@]}"; do
               IFS=':' read -r repo_namespace repo_name <<< "${r}"
               flux --namespace ${repo_namespace} \
-                  reconcile source helm ${repo_name}
+                  reconcile source helm ${repo_name} || true
           done
 
       - if: ${{ github.event.inputs.helmRepoNamespace != '' && github.event.inputs.helmRepoName != '' }}
         name: Sync Helm Repository
         shell: bash
         run: |
           flux --namespace ${{ github.event.inputs.helmRepoNamespace }} \
-              reconcile source helm ${{ github.event.inputs.helmRepoName }}
+              reconcile source helm ${{ github.event.inputs.helmRepoName }} || true
diff --git a/.github/workflows/pre-pull-images.yaml b/.github/workflows/pre-pull-images.yaml
@@ -5,7 +5,10 @@ name: "Pre-pull Images"
 on:
   pull_request:
     branches: ["main"]
-    paths: ["kubernetes/**"]
+    paths:
+      - kubernetes/main/apps/**
+      - kubernetes/main/flux/**
+      - kubernetes/shared/**
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.number || github.ref }}

diff --git a/README.md b/README.md
@@ -162,7 +162,13 @@ In my cluster there are two instances of [ExternalDNS](https://github.com/kubern
 
 <div align="center">
 
-[![Star History Chart](https://api.star-history.com/svg?repos=onedr0p/home-ops&type=Date)](https://star-history.com/#onedr0p/home-ops&Date)
+<a href="https://star-history.com/#onedr0p/home-ops&Date">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=onedr0p/home-ops&type=Date&theme=dark" />
+    <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=onedr0p/home-ops&type=Date" />
+    <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=onedr0p/home-ops&type=Date" />
+  </picture>
+</a>
 
 </div>
 

diff --git a/kubernetes/main/apps/default/cross-seed/app/helmrelease.yaml b/kubernetes/main/apps/default/cross-seed/app/helmrelease.yaml
@@ -34,7 +34,7 @@ spec:
           app:
             image:
               repository: ghcr.io/cross-seed/cross-seed
-              tag: 6.5.2@sha256:d0a9e80d026e37806960ac3551e97b7cf75ae16470dbbf1df217a7aec86cf9c5
+              tag: 6.6.0@sha256:9c67a3dc12beb8c4699094fbc4cc2888ebd071712a99ff252dc28d5706fcee0a
             env:
               CROSS_SEED_PORT: &port 80
               TZ: America/New_York

diff --git a/kubernetes/main/talos/192.168.42.10.sops.yaml.j2 b/kubernetes/main/talos/192.168.42.10.sops.yaml.j2
@@ -37,15 +37,16 @@ machine:
     diskSelector:
       model: Samsung SSD 870
     extraKernelArgs:
-      - i915.enable_guc=3    # Meteor Lake CPU
-      - apparmor=0           # Less security, faster puter
-      - init_on_alloc=0      # Less security, faster puter
-      - init_on_free=0       # Less security, faster puter
-      - intel_iommu=on       # PCI Passthrough
-      - iommu=pt             # PCI Passthrough
-      - mitigations=off      # Less security, faster puter
-      - module_blacklist=igc # Disable onboard NIC
-      - security=none        # Less security, faster puter
+      - i915.enable_guc=3                   # Meteor Lake CPU / iGPU
+      - apparmor=0                          # Less security, faster puter
+      - init_on_alloc=0                     # Less security, faster puter
+      - init_on_free=0                      # Less security, faster puter
+      - intel_iommu=on                      # PCI Passthrough
+      - iommu=pt                            # PCI Passthrough
+      - mitigations=off                     # Less security, faster puter
+      - module_blacklist=igc                # Disable onboard NIC
+      - security=none                       # Less security, faster puter
+      - sysctl.kernel.kexec_load_disabled=1 # Meteor Lake CPU / iGPU
     # i915-ucode, intel-ucode, mei, thunderbolt
     image: factory.talos.dev/installer/de3b865124c5616da8084826167f8c0b0fbc9b905b146290db797024e84097fc:{{ ENV.TALOS_VERSION }}
     wipe: false

diff --git a/kubernetes/main/talos/192.168.42.11.sops.yaml.j2 b/kubernetes/main/talos/192.168.42.11.sops.yaml.j2
@@ -37,15 +37,16 @@ machine:
     diskSelector:
       model: Samsung SSD 870
     extraKernelArgs:
-      - i915.enable_guc=3    # Meteor Lake CPU
-      - apparmor=0           # Less security, faster puter
-      - init_on_alloc=0      # Less security, faster puter
-      - init_on_free=0       # Less security, faster puter
-      - intel_iommu=on       # PCI Passthrough
-      - iommu=pt             # PCI Passthrough
-      - mitigations=off      # Less security, faster puter
-      - module_blacklist=igc # Disable onboard NIC
-      - security=none        # Less security, faster puter
+      - i915.enable_guc=3                   # Meteor Lake CPU / iGPU
+      - apparmor=0                          # Less security, faster puter
+      - init_on_alloc=0                     # Less security, faster puter
+      - init_on_free=0                      # Less security, faster puter
+      - intel_iommu=on                      # PCI Passthrough
+      - iommu=pt                            # PCI Passthrough
+      - mitigations=off                     # Less security, faster puter
+      - module_blacklist=igc                # Disable onboard NIC
+      - security=none                       # Less security, faster puter
+      - sysctl.kernel.kexec_load_disabled=1 # Meteor Lake CPU / iGPU
     # i915-ucode, intel-ucode, mei, thunderbolt
     image: factory.talos.dev/installer/de3b865124c5616da8084826167f8c0b0fbc9b905b146290db797024e84097fc:{{ ENV.TALOS_VERSION }}
     wipe: false

diff --git a/kubernetes/main/talos/192.168.42.12.sops.yaml.j2 b/kubernetes/main/talos/192.168.42.12.sops.yaml.j2
@@ -37,15 +37,16 @@ machine:
     diskSelector:
       model: Samsung SSD 870
     extraKernelArgs:
-      - i915.enable_guc=3    # Meteor Lake CPU
-      - apparmor=0           # Less security, faster puter
-      - init_on_alloc=0      # Less security, faster puter
-      - init_on_free=0       # Less security, faster puter
-      - intel_iommu=on       # PCI Passthrough
-      - iommu=pt             # PCI Passthrough
-      - mitigations=off      # Less security, faster puter
-      - module_blacklist=igc # Disable onboard NIC
-      - security=none        # Less security, faster puter
+      - i915.enable_guc=3                   # Meteor Lake CPU / iGPU
+      - apparmor=0                          # Less security, faster puter
+      - init_on_alloc=0                     # Less security, faster puter
+      - init_on_free=0                      # Less security, faster puter
+      - intel_iommu=on                      # PCI Passthrough
+      - iommu=pt                            # PCI Passthrough
+      - mitigations=off                     # Less security, faster puter
+      - module_blacklist=igc                # Disable onboard NIC
+      - security=none                       # Less security, faster puter
+      - sysctl.kernel.kexec_load_disabled=1 # Meteor Lake CPU / iGPU
     # i915-ucode, intel-ucode, mei, thunderbolt
     image: factory.talos.dev/installer/de3b865124c5616da8084826167f8c0b0fbc9b905b146290db797024e84097fc:{{ ENV.TALOS_VERSION }}
     wipe: false