Viktor Barzin
6101fb99f9
Reduce disk write amplification across cluster (~200-350 GB/day savings) [ci skip]
...
- Prometheus: persist metric whitelist (keep rules) to Helm template, preventing
regression from 33K to 250K samples/scrape on next apply. Reduce retention 52w→26w.
- MySQL InnoDB: aggressive write reduction — flush_log_at_trx_commit=0, sync_binlog=0,
doublewrite=OFF, io_capacity=100/200, redo_log=1GB, flush_neighbors=1, reduced page cleaners.
- etcd: increase snapshot-count 10000→50000 to reduce WAL snapshot frequency.
- VM disks: enable TRIM/discard passthrough to LVM thin pool via create-vm module.
- Cloud-init: enable fstrim.timer, journald limits (500M/7d/compress).
- Kubelet: containerLogMaxSize=10Mi, containerLogMaxFiles=3.
- Technitium: DNS query log retention 0→30 days (was unlimited writes to MySQL).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-09 19:01:21 +00:00
Viktor Barzin
c2f9ca0d13
modules: improve create-vm with additional config options and cloud-init updates
2026-04-06 11:57:55 +03:00
Viktor Barzin
946b5b1745
[ci skip] add qemu-guest-agent to VM templates and enable agent by default
2026-03-01 01:58:46 +00:00
Viktor Barzin
865b68ce77
[ci skip] Rebuild docker-registry with nginx serialization on all ports
...
Replace individual `docker run` commands with Docker Compose stack managed
by systemd. Nginx now fronts all 5 registry ports (5000/5010/5020/5030/5040)
with proxy_cache_lock to serialize concurrent blob pulls and prevent
corrupt partial responses. Adds QEMU guest agent for remote management.
2026-02-22 21:45:53 +00:00
Viktor Barzin
a67a6f350e
[ci skip] Fix pull-through cache for all registries
...
Replace deprecated wildcard containerd mirror with per-registry
config_path approach. Add proxy containers for ghcr.io, quay.io,
registry.k8s.io, and reg.kyverno.io on the docker-registry VM.
Set static IP for docker-registry VM to avoid DHCP issues.
2026-02-15 14:35:52 +00:00
Viktor Barzin
450bc96db8
add startup_shutdown to qemu vms to avoid metadata reset [ci skip]
2025-12-29 10:19:22 +00:00
Viktor Barzin
c58c577a9c
upgrade proxmox provider and some other tf [ci skip]
2025-12-18 11:41:33 +00:00
Viktor Barzin
45e74bedc6
update vm creation tempaltes [ci skip]
2025-12-14 09:50:15 +00:00
Viktor Barzin
b15246a2cb
add docker registry vm and allow multiple provisioning cmds in templates [ci skip]
2025-10-12 18:54:29 +00:00
Viktor Barzin
1968f353a2
add module to create a k8s worker [ci skip]
2025-10-11 20:40:34 +00:00
Viktor Barzin
e0d8f7df3b
parameterize ssh keys in create vm module [ci skip]
2025-10-11 17:24:26 +00:00
Viktor Barzin
8da88f9f6d
move helper scripts in scripts dir [ci skip]
2025-10-11 17:14:59 +00:00
viktorbarzin
d8c0c027de
add webhook handler and env variables [ci skip]
2023-03-18 17:36:37 +00:00
viktorbarzin
fd6d15c598
fix k8s upgrade issues [ci skip]
2022-01-06 00:07:48 +00:00
viktorbarzin
7a7bc34ae3
initial
2021-02-08 20:02:17 +00:00