many things

10-pre-k8s/files/55-updates-strategy.toml

@@ -0,0 +1,6 @@
+[updates]
+strategy = "periodic"
+[[updates.periodic.window]]
+days = [ "Sat", "Sun" ]
+start_time = "22:30"
+length_minutes = 60

10-pre-k8s/files/k3s-agent-install.sh

@@ -0,0 +1,11 @@
+
+#!/usr/bin/env sh
+
+main() {
+	export K3S_URL="https://kubemaster0.lab.cowley.tech:6443"
+	export K3S_TOKEN="${k3s_token}"
+	export INSTALL_K3S_EXEC="agent"
+	curl -sfL https://get.k3s.io | sh -
+        return 0
+}
+main

10-pre-k8s/files/k3s-clean-images.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+/usr/local/bin/k3s crictl rmi --prune

10-pre-k8s/files/k3s-install.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/env sh
+
+main() {
+	export K3S_KUBECONFIG_MODE="644"
+        #export INSTALL_K3S_EXEC=" --disable servicelb --disable traefik"
+	curl -sfL https://get.k3s.io | sh -
+        return 0
+}
+main

10-pre-k8s/files/k3s-nuc-worker-config.yaml

@@ -0,0 +1,3 @@
+node-label:
+  - performance=high
+

10-pre-k8s/files/k3s-prereqs.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+main() {
+	#rpm-ostree install https://rpm.rancher.io/k3s-selinux-0.1.1-rc1.el7.noarch.rpm
+	rpm-ostree install --allow-inactive --apply-live https://github.com/k3s-io/k3s-selinux/releases/download/v1.2.stable.2/k3s-selinux-1.2-2.el8.noarch.rpm
+	touch /var/.k3s-selinux-installed
+	return 0
+}
+main

10-pre-k8s/files/k3s-server-install.sh

@@ -0,0 +1,9 @@
+
+#!/usr/bin/env sh
+
+main() {
+	export K3S_TOKEN="${k3s_token}"
+	curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE="644" INSTALL_K3S_EXEC="server" sh -s - --disable=servicelb
+        return 0
+}
+main

10-pre-k8s/files/k3s-worker-config.yaml

@@ -0,0 +1,5 @@
+node-label:
+  - performance=slow
+
+node-taint:
+  - performance=low:NoExecute

10-pre-k8s/files/minio/config.env

@@ -0,0 +1,16 @@
+# MINIO_ROOT_USER and MINIO_ROOT_PASSWORD sets the root account for the MinIO server.
+# This user has unrestricted permissions to perform S3 and administrative API operations on any resource in the deployment.
+# Omit to use the default values 'minioadmin:minioadmin'.
+# MinIO recommends setting non-default values as a best practice, regardless of environment
+
+MINIO_ROOT_USER=myminioadmin
+MINIO_ROOT_PASSWORD="${minio-secret-key-change-me}"
+
+# MINIO_VOLUMES sets the storage volume or path to use for the MinIO server.
+MINIO_VOLUMES="/mnt/data"
+
+# MINIO_OPTS sets any additional commandline options to pass to the MinIO server.
+# For example, `--console-address :9001` sets the MinIO Console listen port
+MINIO_OPTS="--console-address :9001"
+
+MINIO_PROMETHEUS_AUTH_TYPE="public"