kasun/homelab-infrastructure-as-code
1
0 Fork 0
Code Issues 11 Pull Requests Actions Packages Projects 3 Releases Wiki Activity

Feature/control plane vip via haproxy #34

Merged
kasun merged 2 commits from feature/control-plane-vip-via-haproxy into main 2026-10-03 00:02:12 +02:00
Conversation 0 Commits 2 Files Changed 2
+73 -27
kasun commented 2026-10-02 23:55:29 +02:00
Owner
Copy link
Copy source
No description provided.
kasun added 2 commits 2026-10-02 23:55:30 +02:00
feature(k8s-bootstrap): join nodes and export kubeconfig via control-plane VIP afac1f338f 
Every join and the exported kubeconfig previously pointed at master1Ip,
so losing master-1 cut off API access even with etcd quorum intact. Use
controlPlaneVipAddress (a pfSense IP Alias fronted by HAProxy across all
three masters) instead, add it as a TLS SAN on master-1, and wait for
the VIP's /healthz before any other node joins.

The VIP is set up manually on pfSense rather than via a second
kube-vip/ARP VIP: API access is too critical to depend on the same
failover mechanism that serves LoadBalancer Services.

Also strips trailing whitespace from the Longhorn disk mount script.
docs(k8s-bootstrap): document control-plane VIP and pfSense HAProxy setup
Deploy k8s Bootstrap / Bootstrap k3s Cluster (pull_request) Skipped
Details
Deploy k8s Bootstrap / Pulumi Preview (pull_request) Successful in 40s
Details
19bf92d6bc 
The VIP and HAProxy frontend/backend aren't exposed by the pfsense
provider, so they must be created by hand before this stack is deployed.
kasun merged commit 90c3d37e74 into main 2026-10-03 00:02:12 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
 Kind/Bug
Something is not working
 Kind/Documentation
Documentation changes
 Kind/Enhancement
Improve existing functionality
 Kind/Feature
New functionality
 Kind/Security
This is security issue
 Kind/Testing
Issue or pull request related to testing
Priority
Critical
1
The priority is critical
Priority
High
2
The priority is high
Priority
Medium
3
The priority is medium
Priority
Low
4
The priority is low
Reviewed
Confirmed
1
Issue has been confirmed
Reviewed
Duplicate
2
This issue or pull request already exists
Reviewed
Invalid
3
Invalid issue
Reviewed
Won't Fix
3
This issue won't be fixed
Status
Blocked
1
Something is blocking this issue or pull request
Status
Need More Info
2
Feedback is required to reproduce issue or to continue work
Status
Abandoned
3
Somebody has started to work on this but abandoned work
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
kasun (Kasun Jayatilaka)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: kasun/homelab-infrastructure-as-code#34