Massive revamp

- Modified ansible roles to set priority labels on nodes
- Adding correct label to worker nodes
- Added pihole and switched back to adguard
- Migrated home-assistant and deleted the old one
- Modified all services to support priority node selector

ansible/roles/k3s/master/tasks/main.yml

@@ -139,3 +139,9 @@
     daemon_reload: yes
     state: started
     enabled: yes
+
+
+- name: Add priority label to master servers 
+  become: no
+  local_action:
+    module: command kubectl --kubeconfig ~/.kube/config label nodes {{ inventory_hostname }} priority=critical --overwrite

ansible/roles/k3s/node/tasks/main.yml

@@ -14,3 +14,13 @@
     daemon_reload: yes
     state: restarted
     enabled: yes
+
+- name: Add label to agent server if not already labeled
+  become: no
+  local_action:
+    module: command kubectl --kubeconfig ~/.kube/config label nodes {{ inventory_hostname }} node-role.kubernetes.io/worker={{ inventory_hostname }} --overwrite
+
+- name: Add priority label to agent servers 
+  become: no
+  local_action:
+    module: command kubectl --kubeconfig ~/.kube/config label nodes {{ inventory_hostname }} priority=low --overwrite

terraform/applications.yaml

@@ -139,6 +139,7 @@ plex:
 jellyseerr:
   name: jellyseerr
   namespace: services
+  priority: low
   deploy: true
   volumes: 
     config:
@@ -156,6 +157,7 @@ tautulli:
   name: tautulli
   namespace: services
   deploy: false
+  priority: low
   volumes: 
     config:
       enabled: false
@@ -220,6 +222,7 @@ renovate:
 home-assistant:
   name: home-assistant
   namespace: services
+  priority: low
   deploy: true
   volumes:
     config:
@@ -276,6 +279,7 @@ filebrowser:
   name: filebrowser
   namespace: services
   deploy: true
+  priority: low
   volumes:
     config:
       enabled: false
@@ -307,10 +311,11 @@ sabnzbd:
 bazarr:
   name: bazarr
   namespace: services
-  deploy: false
+  deploy: true
+  priority: low
   volumes:
     config:
-      enabled: false
+      enabled: true
       name: bazarr-config
       size: 200Mi
       access_modes:
@@ -322,7 +327,8 @@ bazarr:
 flood:
   name: flood
   namespace: services
-  deploy: true
+  deploy: false
+  priority: low
   volumes:
     config:
       enabled: false
@@ -369,6 +375,7 @@ mylar:
   name: mylar
   namespace: services
   deploy: false
+  priority: low
   volumes:
     config:
       enabled: false

terraform/gitops.tf

@@ -15,6 +15,7 @@ module "argocd_application" {
   name = each.value.name
   namespace = each.value.namespace
   storage_definitions = each.value.volumes
+  priority = try(each.value.priority,"critical")
   deploy = each.value.deploy
   project = module.gitops.project
   server_side = try(each.value.server_side, "false")

terraform/modules/argocd_application/applications/authelia/values.yaml

@@ -7,6 +7,9 @@ authelia:
   ## Authelia must be served from the domain or a subdomain under it.
   domain: ${duckdns_domain}.duckdns.org
 
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     enabled: true
 

terraform/modules/argocd_application/applications/bazarr/values.yaml

@@ -3,13 +3,16 @@ bazarr:
     PGID: 1001
     PUID: 1001
     TZ: ${timezone}
+
+  nodeSelector:
+    priority: ${priority}
 
   ingress:
     main:
       ingressClassName: traefik
       annotations:
         cert-manager.io/cluster-issuer: letsencrypt
-        traefik.ingress.kubernetes.io/router.entrypoints: websecure
+        traefik.ingress.kubernetes.io/router.entrypoints: websecure-ext
         gethomepage.dev/enabled: "true"
         gethomepage.dev/name: "Bazarr"
         gethomepage.dev/description: "Bazarr is a companion application to Sonarr and Radarr that manages and downloads subtitles"

terraform/modules/argocd_application/applications/dex/values.yaml

@@ -3,6 +3,9 @@ dex:
   # See the [API reference](https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#hostname-and-name-resolution)
   hostAliases: []
 
+  nodeSelector:
+    priority: ${priority}
+
   configSecret:
     create: true
     name: ""

terraform/modules/argocd_application/applications/duplicati/values.yaml

@@ -1,4 +1,8 @@
 duplicati:
+
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/applications/filebrowser/values.yaml

@@ -1,7 +1,8 @@
 filebrowser:
-  nodeSelector:
-    kubernetes.io/hostname: "${master_hostname}"
 
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/applications/flood/values.yaml

@@ -1,4 +1,8 @@
 rtorrent-flood:
+
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/applications/grafana/values.yaml

@@ -1,4 +1,8 @@
 grafana:
+
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     enabled: true
     annotations:

terraform/modules/argocd_application/applications/home-assistant/values.yaml

@@ -1,4 +1,8 @@
 home-assistant:
+
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/applications/homepage/values.yaml

@@ -1,4 +1,8 @@
 homepage:
+
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/applications/jellyseerr/values.yaml

@@ -1,5 +1,8 @@
 jellyseerr:
 
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/applications/kube-prometheus-stack/values.yaml

@@ -1,4 +1,8 @@
 kube-prometheus-stack:
+
+  nodeSelector:
+    priority: ${priority}
+
   alertmanager:
     ingress:
       enabled: true

terraform/modules/argocd_application/applications/kubeview/values.yaml

@@ -1,4 +1,8 @@
 kubeview:
+
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     ingressClassName: traefik
     annotations:

terraform/modules/argocd_application/applications/loki/values.yaml

@@ -0,0 +1,5 @@
+loki:
+
+  nodeSelector:
+    priority: ${priority}
+

terraform/modules/argocd_application/applications/mylar/values.yaml

@@ -1,10 +1,14 @@
 mylar:
+
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik
       annotations:
         cert-manager.io/cluster-issuer: letsencrypt
-        traefik.ingress.kubernetes.io/router.entrypoints: websecure
+        traefik.ingress.kubernetes.io/router.entrypoints: websecure-ext
         gethomepage.dev/enabled: "true"
         gethomepage.dev/name: "Mylar"
         gethomepage.dev/description: "Automated Comic Book (cbr/cbz) downloader for use with NZB and torrents "

terraform/modules/argocd_application/applications/nzbget/values.yaml

@@ -4,6 +4,9 @@ nzbget:
     PUID: 1001
     TZ: ${timezone}
 
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/applications/plex/values.yaml

@@ -8,6 +8,10 @@ plex:
     PLEX_PREFERENCE_1: "FriendlyName=plexHome"
     TZ: ${timezone}
 
+
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/applications/promtail/values.yaml

@@ -1,5 +1,5 @@
 promtail:
 
   nodeSelector:
-    # kubernetes.io/hostname: ${master_hostname}
-    kubernetes.io/arch : amd64
+    priority: ${priority}
+

terraform/modules/argocd_application/applications/prowlarr/values.yaml

@@ -1,7 +1,8 @@
 prowlarr:
-  nodeSelector:
-    kubernetes.io/hostname: "${master_hostname}"
 
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/applications/radarr/values.yaml

@@ -1,6 +1,8 @@
 radarr:
+
   nodeSelector:
-    kubernetes.io/hostname: "${master_hostname}"
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/applications/readarr/values.yaml

@@ -1,4 +1,8 @@
 readarr:
+
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/applications/renovate/values.yaml

@@ -1,4 +1,8 @@
 renovate:
+
+  nodeSelector:
+    priority: ${priority}
+
   cronjob:
     # -- Schedules the job to run using cron notation
     schedule: '45 * * * *'  # At 01:00 every day

terraform/modules/argocd_application/applications/sabnzbd/values.yaml

@@ -1,4 +1,8 @@
 sabnzbd:
+
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/applications/sonarr/values.yaml

@@ -1,6 +1,8 @@
 sonarr:
+
   nodeSelector:
-    kubernetes.io/hostname: "${master_hostname}"
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/applications/tautulli/values.yaml

@@ -3,6 +3,9 @@ tautulli:
   env:
     TZ: ${timezone}
 
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/applications/whisparr/values.yaml

@@ -1,4 +1,8 @@
 radarr:
+
+  nodeSelector:
+    priority: ${priority}
+
   ingress:
     main:
       ingressClassName: traefik

terraform/modules/argocd_application/main.tf

@@ -20,7 +20,7 @@ resource "argocd_application" "application" {
       helm {
 
         value_files = local.values_files
-        values = templatefile("${path.module}/applications/${var.name}/values.yaml",merge(var.override_values,{"namespace":var.namespace}))
+        values = templatefile("${path.module}/applications/${var.name}/values.yaml",merge(var.override_values,{"namespace":var.namespace,"priority":var.priority}))
       }
     }
 

terraform/modules/argocd_application/variables.tf

@@ -51,4 +51,10 @@ variable "server_side" {
   default = "false"
   description = "Determines if the app is going to be deployed using server side apply"
 
+}
+
+variable "priority" {
+  type        = string
+  description = "Determines in which node to run the helm chart"
+
 }