Merge branch 'main' of ssh://git.berlin.ccc.de/kubernauts/iac

This commit is contained in:
XenGi 2026-08-28 17:39:57 +02:00
commit 74253c0fde
Signed by: xengi
SSH key fingerprint: SHA256:dM+fLZGsDvyv6kunjE8bGduL24VsCFB4LEOSdmRHdG0
2 changed files with 63 additions and 1 deletions

35
IPAM.md Normal file
View file

@ -0,0 +1,35 @@
# IPAM
| CIDR | rDNS | DNS | Service |
| ---- | ---- | --- | ------- |
| 195.160.172.88/24 | k8s.berlin.ccc.de | *.k8s.berlin.ccc.de | external address |
| 2001:678:560:42::88/64 | k8s.berlin.ccc.de | *.k8s.berlin.ccc.de | external address |
| fd00:23:42::/48 | - | - | internal networks |
| ├─ fd00:23:42:0000::/56 | - | - | reserved |
| ├─ fd00:23:42:1000::/56 | - | - | node networks |
| │ ├─ fd00:23:42:1010::/64 | - | control-plane-1.k8s.berlin.ccc.de | node 1 |
| │ ├─ fd00:23:42:1020::/64 | - | control-plane-2.k8s.berlin.ccc.de | node 2 |
| │ ├─ fd00:23:42:1030::/64 | - | control-plane-3.k8s.berlin.ccc.de | node 3 |
| │ ├─ fd00:23:42:1001::/64 | - | worker-1.k8s.berlin.ccc.de | node 4 |
| │ ├─ fd00:23:42:1002::/64 | - | worker-2.k8s.berlin.ccc.de | node 5 |
| │ ├─ fd00:23:42:1003::/64 | - | worker-3.k8s.berlin.ccc.de | node 6 |
| │ ├─ fd00:23:42:1004::/64 | - | worker-4.k8s.berlin.ccc.de | node 7 |
| │ └─ fd00:23:42:1005::/64 | - | worker-5.k8s.berlin.ccc.de | node 8 |
| ├─ fd00:23:42:2000::/56 | - | - | pod networks |
| │ ├─ fd00:23:42:2010::/64 | - | - | node 1 (control plane) |
| │ ├─ fd00:23:42:2020::/64 | - | - | node 2 (control plane) |
| │ ├─ fd00:23:42:2030::/64 | - | - | node 3 (control plane) |
| │ ├─ fd00:23:42:2001::/64 | - | - | node 4 (worker) |
| │ ├─ fd00:23:42:2002::/64 | - | - | node 5 (worker) |
| │ ├─ fd00:23:42:2003::/64 | - | - | node 6 (worker) |
| │ ├─ fd00:23:42:2004::/64 | - | - | node 7 (worker) |
| │ └─ fd00:23:42:2005::/64 | - | - | node 8 (worker) |
| └─ fd00:23:42:3000::/56 | - | *.svc.cluster.local | service network |
```
fd00:23:42:NNMM::...
│ │
│ └─ node/subnet
└──── cluster function
```

View file

@ -13,16 +13,43 @@ Nix IaC
Dell PowerEdge R630
- 2x Intel Xeon E5-2699C v4 (22C44T @2.2GHz)
- 24x 16GB DDR4 ECC 1866MHz (384GB)
- SANDISK Extreme Fit 64GB USB (boot drive)
- 2x Kingston FURY Renegade NVMe 1TB (RAID1 host OS)
- 6x Transcend SSD230S 4TB SATA SSD (Ceph pool)
- NVIDIA Quadro P2000 (pinned to worker-01)
- 1024 Cores
- 5GB GDDR5
## Virtual machines
### master-01 - master-03
### controlplane-01 - controlplane-03
- CPU: 2
- RAM: 8GB
- Storage: 64GB (os drive)
### worker-01 - worker-05
- CPU: 16
- RAM: 64GB
- Storage: 64GB (os drive) + 4TB (Ceph)
## Rollout (WIP)
### Deploy host system
```bash
nix run ...
```
### Deploy control plane
```bash
nix run ...
```
### Deploy workers
```bash
nix run ...
```