Added Cloudflare DNS, HAProxy LB

inventory/customer_deovero.yml

@@ -4,6 +4,11 @@ kubernetes:
     ansible_host:
       hosts:
         localhost:
+    control_lb_nodes:
+      hosts:
+        control.deovero.k8s.snel.com:
+          ansible_host: 185.62.56.88
+          customer: deovero
     talos:
       children:
         customer_deovero:
@@ -13,19 +18,19 @@ kubernetes:
             talos_control_nodes:
               hosts:
                 c1.deovero.k8s.snel.com:
-                  ansible_remote: 185.62.56.239
+                  ansible_host: 185.62.56.239
                 c2.deovero.k8s.snel.com:
-                  ansible_remote: 185.62.58.208
+                  ansible_host: 185.62.58.208
                 c3.deovero.k8s.snel.com:
-                  ansible_remote: 185.62.56.102
+                  ansible_host: 185.62.56.102
             talos_worker_nodes:
               hosts:
                 w1.deovero.k8s.snel.com:
-                  ansible_remote: 185.62.58.15
+                  ansible_host: 185.62.58.15
                 w2.deovero.k8s.snel.com:
-                  ansible_remote: 185.62.56.96
+                  ansible_host: 185.62.56.96
                 hw1.deovero.k8s.snel.com:
-                  ansible_remote: 77.95.229.160
+                  ansible_host: 77.95.229.160
                   talos_disk: /dev/nvme0n1
                   mayastor_disk: /dev/nvme1n1
                   network_interface: bond0
@@ -38,7 +43,7 @@ kubernetes:
                       - enp196s0f1
                       - enp65s0f1
                 hw2.deovero.k8s.snel.com:
-                  ansible_remote: 128.204.192.80
+                  ansible_host: 128.204.192.80
                   talos_disk: /dev/nvme0n1
                   mayastor_disk: /dev/nvme1n1
                   network_interface: bond0
@@ -51,7 +56,7 @@ kubernetes:
                       - enp196s0f1
                       - enp65s0f1
                 hw3.deovero.k8s.snel.com:
-                  ansible_remote: 89.207.131.21
+                  ansible_host: 89.207.131.21
                   talos_disk: /dev/nvme0n1
                   mayastor_disk: /dev/nvme1n1
                   network_interface: bond0

inventory/general_k8s.yml

@@ -0,0 +1,12 @@
+---
+kubernetes:
+  children:
+    ubuntu:
+      children:
+        control_lb_nodes
+    haproxy:
+      children:
+        control_lb_nodes
+    debian:
+      children:
+        ubuntu:

inventory/group_vars/all.yml

@@ -10,3 +10,34 @@ deb_architecture:
   armv7l: "armhf"
   i386: "i386"
   x86_64: "amd64"
+# @TODO Replace SMTP relay details
+smtp_relay_host: smtp-relay.sendinblue.com
+smtp_relay_port: 587
+smtp_relay_user: admin@deovero.com
+smtp_relay_password: !vault |
+  $ANSIBLE_VAULT;1.1;AES256
+  31343466663231306261626330613630373538316366366239336537343932383034316634636461
+  3734663163386631383433623339653364356433326237630a613363326537663532353736333636
+  32353335646463306332393035313935303730633461323965353462613766376536663463613333
+  6539636365373832650a633230626634663930303835393334383035363663373437383532373166
+  35633337396139646630663734386336613036306532326363386364376462363336
+smtp_relay_auth_method: cram-md5
+ip_whitelist:
+  # Jeroen Telenet
+  - 81.83.244.93
+  # Jeroen Telenet
+  - 83.217.157.124
+  # Jeroen Telenet
+  - 2a02:1810:1514:6800::/60
+  # Jeroen LAN
+  - 192.168.0.0/23
+  # jump.snel.com
+  - 193.33.60.30
+cloudflare_token: !vault |
+  $ANSIBLE_VAULT;1.1;AES256
+  37356333326137343062323165343961666530333462656331353762346565366363616363366433
+  6565623363383038346137343564346163396533303630310a633064653535646331653837336137
+  30643835383563626662353831326531323236623865636362313765373661653033383635623065
+  3635623433346165320a373533323734343764393761653036383961623931333165656537306464
+  62393830623464333330316439376164636537366363333336363762643434373534383236613034
+  6539346663303038376533346131313634643939386235323831