mrcharles
050e235f8b
AWX (Ansible automation controller) deployed on tsys-awx.knel.net (VMID 600 on pfv-tsys6). Accessible at http://tsys-awx.knel.net:80 (admin/REDACTED_PASSWORD). Deployment details: - k3s v1.36.2 single-node (no Traefik) on Debian 13 trixie - AWX Operator 2.19.1 + AWX CR (LoadBalancer service via k3s ServiceLB) - PostgreSQL 15 bundled (8 GiB PVC on local-path provisioner) - VM disk resized 32->60 GB; swap partition converted to swapfile - Fixed kube-rbac-proxy image (gcr.io removed -> quay.io/brancz replacement) - Fixed AWX CR field names (postgres_data_volume_size -> postgres_storage_requirements) Scripts: awx/install-k3s.sh, awx/deploy-awx.sh, awx/verify-awx.sh Manifests: awx/awx-instance.yaml, awx/namespace.yaml Docs: awx/README.md All pods running: operator 2/2, postgres 1/1, web 3/3, task 4/4. 💘 Generated with Crush Assisted-by: Crush:glm-5.2
54 lines
2.1 KiB
Markdown
54 lines
2.1 KiB
Markdown
# PFVCluster
|
|
|
|
Unified infrastructure repo for the Known Element Enterprises Proxmox R&D cluster.
|
|
|
|
**[→ Current Status](STATUS.md)** · **[→ Documentation Index](docs/docmap.md)** · **[→ Agent Guidelines](AGENTS.md)**
|
|
|
|
## Directory Structure
|
|
|
|
| Directory | Description |
|
|
|-----------|-------------|
|
|
| [`provisioning/`](provisioning/) | Server provisioning (SetupNewSystem.sh, security hardening, 2FA, NTP/DNS config, SNMP, Dell OMSA) |
|
|
| [`tests/`](tests/) | Test suite + VM validation harness |
|
|
| [`dns-cluster-setup/`](dns-cluster-setup/) | Technitium DNS cluster replication scripts |
|
|
| [`k8s/`](k8s/) | k3s cluster setup scripts (3-node HA control plane over Tailscale) + co-located docs |
|
|
| [`powerman/`](powerman/) | Cyclades PM10i PDU management via powerman on pfv-tsys1 |
|
|
| [`console/`](console/) | Serial console management (ser2net + conman) for network switches on pfv-tsys4 |
|
|
| [`perf/`](perf/) | Proxmox performance tuning, fleet audit, iperf, switch diagnostics |
|
|
| [`proxmox/`](proxmox/) | Proxmox fleet docs: hardware audit, capacity analysis, k8s host planning |
|
|
| [`netinfra/`](netinfra/) | pfv-netinfra-01/02 DNS/NTP/DHCP setup + audit scripts |
|
|
| [`switches/`](switches/) | Switch configuration captures |
|
|
| [`awx/`](awx/) | Ansible AWX deployment on tsys-awx (k3s + AWX Operator 2.19.1, v24.6.1) |
|
|
| [`docs/`](docs/) | Server-build docs, documentation index ([docmap](docs/docmap.md)), and archive |
|
|
| [`vendor/`](vendor/) | Vendored KNELShellFramework |
|
|
|
|
## Quick Start
|
|
|
|
### Provision a new server
|
|
```bash
|
|
sudo bash provisioning/SetupNewSystem.sh
|
|
```
|
|
|
|
### Validate on the sandbox VM
|
|
```bash
|
|
VM_ID=6000 ./tests/vm-validation.sh all
|
|
```
|
|
|
|
### Deploy DNS cluster
|
|
```bash
|
|
cd dns-cluster-setup/ && ./setup.sh all
|
|
```
|
|
|
|
### Deploy perf tunings
|
|
```bash
|
|
cd perf/ && ./deploy-tuning.sh
|
|
```
|
|
|
|
## Architecture
|
|
|
|
- **Proxmox hosts**: 7 standalone PVE installs managed via PDM
|
|
- **DNS**: Technitium (authoritative) + Pi-hole (recursive) on pfv-netinfra-01/02
|
|
- **NTP**: pfv-netinfra-01/02 (redundant, LAN IPs, stratum 2/3)
|
|
- **Production**: Cloudron VPS in Reston VA (this cluster is R&D only)
|
|
- **Backups**: Proxmox Backup Server (PBS)
|