https://github.com/dekeyrej/ansible
https://github.com/dekeyrej/ansible
ansible automation cli cloud-init homelab microk8s proxmox secrets vault yaml
Last synced: 13 days ago
JSON representation
- Host: GitHub
- URL: https://github.com/dekeyrej/ansible
- Owner: dekeyrej
- License: mit
- Created: 2025-03-13T01:40:39.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2025-12-29T21:42:35.000Z (7 months ago)
- Last Synced: 2026-01-02T04:38:33.131Z (7 months ago)
- Topics: ansible, automation, cli, cloud-init, homelab, microk8s, proxmox, secrets, vault, yaml
- Language: JavaScript
- Homepage:
- Size: 537 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# 📘 Project: Proxmox to Vault-Hardened MicroK8s Cluster Homelab Automation
A fully automated system for provisioning Kubernetes-ready nodes via Proxmox, configuring secure Vault-based secrets delivery, orchestrating microceph and microk8s clusters, and deploying services and applications—all with Ansible.
## 📁 Repository Structure
- `playbooks/`: Entry points for specific automation tasks.
- `roles/`: Modular roles for provisioning, configuration, and updates.
- `inventory/`: Host definitions for targeting your infrastructure.
- `collections/`: External dependencies (e.g., community modules).
- `ansible.cfg`: Configuration for Ansible execution.
## 🚀 Getting Started
### Requirements
- Ansible 2.14+
- Python 3.10+
- Proxmox VE with API access
- Vault with GCP KMS credentials (optional)
Install required collections:
```bash
ansible-galaxy install -r collections/requirements.yml
```
## 🛠️ Features
- Proxmox VM & LXC container automation via community.general.proxmox
- Cloud-init bootstrapping and cloud-capable templating
- Self-signed RFC-compliant CA and TLS cert generation
- Vault installation, configuration, auto-unseal with GCP KMS
- MicroK8s and MicroCeph clustering with node prep
- Secrets provisioning for K8s workloads using Vault and KubeVault integration
- Turnkey deployment of microservices & supporting infrastructure
Run a playbook:
```bash
ansible-playbook -i inventory/hosts.ini playbooks/88_proxmox_provision.yaml
```
## 🧱 Key Roles
| Role | Description |
|---|---|
| proxmox-container-fetch-image | Downloads latest Ubuntu Noble LXC image |
| vault-configure | Installs and configures HashiCorp Vault |
| microk8s-assemble-cluster | Builds a MicroK8s cluster across nodes |
| kubernetes-redis-deploy | Sets up Redis for real-time data flow |
| kubernetes-microservices-deploy | Deploys Redis-first microservices |
| magic-mirror-install | Configures MagicMirror display system |
## 🧪 Testing & Development
Use roletesting.yaml or testbook.yaml for isolated role testing.
## 🧠 Philosophy
- Declarative: Minimal imperative logic.
- Composable: Roles can be reused across playbooks.
- Transparent: Clear logs and traceable actions.
## 📜 License
MIT
## 🧩 Related Projects
- [MicroServiceMatrix](https://github.com/dekeyrej/microservicematrix) Modular microservices for real-time updates
- [MatrixClient](https://github.com/dekeyrej/matrixclient) SSE-driven client for Redis-first architecture
## 🌱 Extras
- MagicMirror2 container bootstrapped with Ansible
- Future support for deploy_mtig_stack, open-webui, and other microservices
## 🔭 Roadmap
- Improve cloud-init templating of base images
- Replace cert patching once MicroK8s supports modern key usages
- Add validation role to verify cluster and secrets bootstrapping