Terraform revamp

README.md

@@ -167,7 +167,7 @@ openssl x509 -req -in "${DOMAIN}".csr -CA homelab-ca.crt -CAkey homelab-ca.key -
 
 ~170W
 
-Monthly, the homelab costs (((170W * 24h) / 1000) * £0.33/kWh * 365days) / 12months = £40.95 (~47$).
+Monthly, the homelab costs (((170W * 24h) / 1000) * £0.21/kWh * 365days) / 12months = £26 (~35$).
 
 # Deployment
 

kubernetes/calico/helm-values.yaml

@@ -0,0 +1,15 @@
+---
+apiServer:
+  enabled: false
+goldmane:
+  enabled: false
+whisker:
+  enabled: false
+resources:
+  limits:
+    cpu: 1
+    memory: 1000Mi
+  requests:
+    cpu: 10m
+    memory: 32Mi
+...

kubernetes/httpd-healthcheck/healthcheck-deployment.yml

@@ -1,12 +1,4 @@
 ---
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: httpd-healthcheck
-  labels:
-    app: httpd-healthcheck
-    istio-injection: enabled
----
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -52,3 +44,4 @@ spec:
             cpu: 10m
       restartPolicy: Always
       terminationGracePeriodSeconds: 60
+...

kubernetes/httpd-healthcheck/healthcheck-gateway.yml

@@ -16,3 +16,4 @@ spec:
         # Don't use a specific server name, or then we can't use NodePort services, due to
         # https://github.com/istio/istio/issues/12545
         - "*"
+...

kubernetes/httpd-healthcheck/healthcheck-service.yml

@@ -31,3 +31,4 @@ spec:
             host: httpd-healthcheck-service
             port:
               number: 10001
+...

kubernetes/istio/helm-ingressgateway-values.yaml

@@ -0,0 +1,43 @@
+---
+name: istio-ingressgateway
+autoscaling:
+  minReplicas: 2
+resources:
+  requests:
+    cpu: 100m
+    memory: 128Mi
+  limits:
+    cpu: 2000m
+    memory: 1024Mi
+affinity:
+  podAntiAffinity:
+    preferredDuringSchedulingIgnoredDuringExecution:
+      - podAffinityTerm:
+          labelSelector:
+            matchExpressions:
+              - key: app
+                operator: In
+                values:
+                  - istio-ingressgateway
+          topologyKey: failure-domain.beta.kubernetes.io/zone
+        weight: 100
+service:
+  type: LoadBalancer
+  ports:
+    # Whatever is listed as the first port in a Service of
+    # type LoadBalancer is picked to be the port used for
+    # health checks. 10001 is the port of httpd-healthcheck.
+    - name: httpd-healthcheck
+      port: 10001
+      targetPort: 10001
+    - name: http
+      port: 80
+      targetPort: 8080
+    - name: https
+      port: 443
+      targetPort: 8443
+    # Istio readiness port of gateways
+    - name: status-port
+      port: 15021
+      targetPort: 15021
+...

kubernetes/istio/helm-istiod-values.yaml

@@ -0,0 +1,41 @@
+---
+pilot:
+  autoscalerEnabled: true
+  autoscaleMin: 2
+  autoscaleMax: 5
+  replicaCount: 2
+  rollingMaxSurge: 50%
+  rollingMaxUnavailable: 1
+  resources:
+    requests:
+      cpu: 150m
+      memory: 300Mi
+    limits:
+      cpu: 2000m
+      memory: 4096Mi
+global:
+  defaultPodDisruptionBudget:
+    enabled: true
+  defaultResources:
+    requests:
+      cpu: 10m
+  istioNamespace: istio-system
+  proxy:
+    # applies to istio-proxy and istio-init containers
+    resources:
+      limits:
+        cpu: 1000m
+        memory: 1024Mi
+      requests:
+        cpu: 20m
+        memory: 64Mi
+    tracer: "zipkin"
+telemetry:
+  enabled: true
+meshConfig:
+  defaultConfig:
+    tracing:
+      sampling: 100
+      zipkin:
+        address: jaeger-collector.istio-system:9411
+...