panxiao81/homelab-infra
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

声明 sandbox 双节点 K3s 集群 IaC #85

Merged
panxiao81 merged 2 commits from feat/sandbox-cluster-iac into main 2026-09-17 15:42:42 +00:00
Conversation 0 Commits 2 Files Changed 25
+1146
panxiao81 commented 2026-09-17 14:58:51 +00:00
Owner
Copy Link
Copy Source

变更

  • 在 pve1/pve2 声明两个 privileged LXC，并固化 KVM、vhost、TUN、kmsg 与宿主内核模块前置
  • 部署 PostgreSQL 16 同步主备，K3s 通过 VyOS 固定写入口访问外部 datastore
  • 为 K3s API 增加 10.60.0.13:6443 VyOS TCP LB
  • 固定 K3s v1.36.4+k3s1 与 Flux v2.9.5，增加 clusters/sandbox/ root
  • 增加 PostgreSQL、LXC、双 control-plane、系统 Pod 与 API VIP 的只读验收

已验证

  • 两节点均为 Ready/control-plane
  • CoreDNS、local-path-provisioner、metrics-server 均为 Running
  • PostgreSQL standby 为 synchronous streaming，固定入口连接 writable primary
  • 携带集群凭据通过 10.60.0.13:6443/livez 返回 ok
  • verify.yml：changed=0 / failed=0
  • ansible-lint production profile、site.yml/verify.yml syntax check、git diff --check 通过

部署顺序

Flux 暂未应用到 live。合并后再运行 Flux bootstrap，避免 root sync 在远端 main 尚无 clusters/sandbox/ 时进入失败状态。

## 变更 - 在 pve1/pve2 声明两个 privileged LXC，并固化 KVM、vhost、TUN、kmsg 与宿主内核模块前置 - 部署 PostgreSQL 16 同步主备，K3s 通过 VyOS 固定写入口访问外部 datastore - 为 K3s API 增加 `10.60.0.13:6443` VyOS TCP LB - 固定 K3s `v1.36.4+k3s1` 与 Flux `v2.9.5`，增加 `clusters/sandbox/` root - 增加 PostgreSQL、LXC、双 control-plane、系统 Pod 与 API VIP 的只读验收 ## 已验证 - 两节点均为 `Ready/control-plane` - CoreDNS、local-path-provisioner、metrics-server 均为 Running - PostgreSQL standby 为 synchronous streaming，固定入口连接 writable primary - 携带集群凭据通过 `10.60.0.13:6443/livez` 返回 `ok` - `verify.yml`：`changed=0 / failed=0` - `ansible-lint` production profile、`site.yml`/`verify.yml` syntax check、`git diff --check` 通过 ## 部署顺序 Flux 暂未应用到 live。合并后再运行 Flux bootstrap，避免 root sync 在远端 `main` 尚无 `clusters/sandbox/` 时进入失败状态。
panxiao81 added 1 commit 2026-09-17 14:58:52 +00:00
feat: 声明 sandbox 双节点 K3s 集群
yaml / yaml (pull_request) Successful in 18s
Details
ansible / collection-test (pull_request) Successful in 1m16s
Details
ansible / lint (pull_request) Successful in 2m18s
Details
6585d8c46a
panxiao81 added 1 commit 2026-09-17 15:11:30 +00:00
docs: 明确 sandbox 监控边界
yaml / yaml (pull_request) Successful in 17s
Details
ansible / collection-test (pull_request) Successful in 1m8s
Details
ansible / lint (pull_request) Successful in 2m43s
Details
f810b1c674
panxiao81 merged commit 2030751e6a into main 2026-09-17 15:42:42 +00:00
panxiao81 deleted branch feat/sandbox-cluster-iac 2026-09-17 15:42:42 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
panxiao81 (Xiao Pan)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: panxiao81/homelab-infra#85