--wip-- [skipci]

Author: brettinternet

kubernetes/main/apps/database/cloudnative-pg/cluster/cluster16.yaml

@@ -23,9 +23,10 @@ spec:
     reusePVC: true
   resources:
     requests:
-      cpu: 500m
+      cpu: 250m
+      memory: 4Gi
     limits:
-      memory: 12Gi
+      memory: 8Gi
   monitoring:
     enablePodMonitor: true
   backup:

kubernetes/main/apps/default/kustomization.yaml

@@ -4,14 +4,14 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./namespace.yaml
-  - ./atuin/ks.yaml
+  # - ./atuin/ks.yaml
   - ./echo-server/ks.yaml
   - ./filebrowser/ks.yaml
-  - ./homepage/ks.yaml
+  # - ./homepage/ks.yaml
   # - ./kopia/ks.yaml
-  - ./linkding/ks.yaml
-  - ./livebook/ks.yaml
-  - ./maddy/ks.yaml
-  - ./mealie/ks.yaml
-  - ./miniflux/ks.yaml
+  # - ./linkding/ks.yaml
+  # - ./livebook/ks.yaml
+  # - ./maddy/ks.yaml
+  # - ./mealie/ks.yaml
+  # - ./miniflux/ks.yaml
   - ./netshoot/ks.yaml

kubernetes/main/apps/default/linkding/app/helmrelease.yaml

@@ -86,7 +86,7 @@ spec:
                 memory: 512M
               limits:
                 # For HTML snapshot spike
-                memory: 8G
+                memory: 4Gi
     service:
       app:
         controller: linkding

kubernetes/main/apps/default/livebook/app/helmrelease.yaml

@@ -71,7 +71,7 @@ spec:
               requests:
                 cpu: 10m
               limits:
-                cpu: 2000m
+                cpu: 1000m
                 memory: 1Gi
     defaultPodOptions:
       securityContext:

kubernetes/main/apps/home/frigate/app/helmrelease.yaml

@@ -65,7 +65,7 @@ spec:
                 cpu: 100m
               limits:
                 gpu.intel.com/i915: "1"
-                memory: 8Gi
+                memory: 4Gi
     defaultPodOptions:
       affinity:
         podAntiAffinity:

kubernetes/main/apps/home/home-assistant/app/helmrelease.yaml

@@ -52,7 +52,7 @@ spec:
                 cpu: 10m
               limits:
                 device-plugin.arpa/zigbee: 1
-                memory: 8Gi
+                memory: 4Gi
           code-server:
             image:
               repository: ghcr.io/coder/code-server

kubernetes/main/apps/home/kustomization.yaml

@@ -4,8 +4,8 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./namespace.yaml
-  - ./esphome/ks.yaml
-  - ./frigate/ks.yaml
-  - ./home-assistant/ks.yaml
-  - ./mosquitto/ks.yaml
+  # - ./esphome/ks.yaml
+  # - ./frigate/ks.yaml
+  # - ./home-assistant/ks.yaml
+  # - ./mosquitto/ks.yaml
   # - ./zigbee2mqtt/ks.yaml

kubernetes/main/apps/media/kustomization.yaml

@@ -4,15 +4,15 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./namespace.yaml
-  - ./autobrr/ks.yaml
-  # - ./calibre/ks.yaml
-  # - ./calibre-web/ks.yaml
-  # - ./jellyseerr/ks.yaml
-  # - ./plex/ks.yaml
-  - ./prowlarr/ks.yaml
-  - ./radarr/ks.yaml
-  - ./recyclarr/ks.yaml
-  - ./sabnzbd/ks.yaml
-  - ./sonarr/ks.yaml
-  - ./tautulli/ks.yaml
-  - ./unpackerr/ks.yaml
+  # - ./autobrr/ks.yaml
+  # # - ./calibre/ks.yaml
+  # # - ./calibre-web/ks.yaml
+  # # - ./jellyseerr/ks.yaml
+  # # - ./plex/ks.yaml
+  # - ./prowlarr/ks.yaml
+  # - ./radarr/ks.yaml
+  # - ./recyclarr/ks.yaml
+  # - ./sabnzbd/ks.yaml
+  # - ./sonarr/ks.yaml
+  # - ./tautulli/ks.yaml
+  # - ./unpackerr/ks.yaml

kubernetes/main/apps/media/sabnzbd/app/helmrelease.yaml

@@ -71,7 +71,7 @@ spec:
               requests:
                 cpu: 100m
               limits:
-                memory: 8Gi
+                memory: 4Gi
     defaultPodOptions:
       securityContext:
         runAsNonRoot: true

kubernetes/main/apps/observability/kustomization.yaml

@@ -3,12 +3,12 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./namespace.yaml
-  - ./gatus/ks.yaml
-  - ./grafana/ks.yaml
-  - ./healthchecks/ks.yaml
-  - ./kube-prometheus-stack/ks.yaml
-  - ./kubernetes-dashboard/ks.yaml
-  - ./loki/ks.yaml
-  - ./prometheus-operator-crds/ks.yaml
-  - ./smartctl-exporter/ks.yaml
-  - ./snmp-exporter/ks.yaml
+  # - ./gatus/ks.yaml
+  # - ./grafana/ks.yaml
+  # - ./healthchecks/ks.yaml
+  # - ./kube-prometheus-stack/ks.yaml
+  # - ./kubernetes-dashboard/ks.yaml
+  # - ./loki/ks.yaml
+  # - ./prometheus-operator-crds/ks.yaml
+  # - ./smartctl-exporter/ks.yaml
+  # - ./snmp-exporter/ks.yaml

kubernetes/main/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml

@@ -70,10 +70,10 @@ spec:
           requireMsgr2: true
       storage:
         useAllNodes: true
-        useAllDevices: true
-        # deviceFilter: "^nvme.n1$"
+        useAllDevices: false
+        deviceFilter: sda
         config:
-          osdsPerDevice: "1"
+          osdsPerDevice: "2"
       placement:
         mgr: &placement
           nodeAffinity:

kubernetes/main/bootstrap/talos/talconfig.yaml

@@ -24,7 +24,8 @@ nodes:
   # Baremetal
   - hostname: "k-0"
     ipAddress: "10.1.2.100"
-    installDisk: /dev/disk/by-id/nvme-INTEL_SSDPEKKW256G7_BTPY64540F5A256D
+    installDiskSelector:
+      type: nvme
     # https://factory.talos.dev/?arch=amd64&cmdline-set=true&extensions=-&extensions=siderolabs%2Fi915-ucode&extensions=siderolabs%2Fintel-ucode&extensions=siderolabs%2Fiscsi-tools&extensions=siderolabs%2Futil-linux-tools&platform=metal&target=metal&version=1.8.1
     talosImageURL: &talosIntelGpuImage factory.talos.dev/installer/ebdfa27a8d6272acf806ac6a5c968c3c284a47ce880273cecb19442c11bf0474
     schematic: &schematic
@@ -54,7 +55,8 @@ nodes:
           ip: *kubeApiIP
   - hostname: "k-1"
     ipAddress: "10.1.2.101"
-    installDisk: /dev/disk/by-id/nvme-INTEL_SSDPEKKW256G7_BTPY63420579256D
+    installDiskSelector:
+      type: nvme
     talosImageURL: *talosIntelGpuImage
     schematic: *schematic
     controlPlane: true
@@ -70,7 +72,8 @@ nodes:
         vip: *vip
   - hostname: "k-2"
     ipAddress: "10.1.2.102"
-    installDisk: /dev/disk/by-id/nvme-Samsung_SSD_960_EVO_250GB_S3ESNX0J808577J
+    installDiskSelector:
+      type: nvme
     talosImageURL: *talosIntelGpuImage
     schematic: *schematic
     controlPlane: true
@@ -85,6 +88,8 @@ nodes:
         mtu: *mtu
         vip: *vip
 
+# TODO: add udev rule patch for USB devices
+# https://github.com/buroa/k8s-gitops/blob/6e4b93e2d77171a17642357cf7aac3819c1f22ad/talos/talconfig.yaml#L415-L419
 patches:
   - # Force nameserver
     |-

scripts/wipe-disk.sh

@@ -5,7 +5,7 @@
 
 # Run this in the rook ceph tools pod container on each node:
 
-DISK="/dev/nvme1n1"; \
+DISK="/dev/sda"; \
   sgdisk --zap-all $DISK; \
   dd if=/dev/zero of="$DISK" bs=1M count=100 oflag=direct,dsync; \
   blkdiscard $DISK; \