Redoing my setup after many years

[genebean]

To do:

• Create Fedora CoreOS vm
• Bootstrap with Cilium CNI
• Bootstrap Argo CD
• Add cert-manager
• Add Sealed Secrets
• Add Linkerd with CNI enabled
• Add Traefik v3 with Gateway API
• Cilium in Argo CD
• Cilium LB IPAM
• Configure Traefik v3 to use IP from Cilium IPAM
• Add Muluts CNI with L2 ipvlan
• Add packages to CoreOS:
  - ipvsadm
  - htop
• Make CoreOS have a static IP and put that address in the K3s config as the value of --tls-san. This is needed for kube-vip.
• Add kube-vip for control plane
• add Kured - the KUbernetes REboot Daemon
• Add Reloader
• Add RBAC Manager
• Add OpenEBS
• Add MinIO
• Add external-dns and configure to work with one of my providers
  • PowerDNS
  • Gandi
• Configure cert-manager for:
  • Let's Encrypt
  • self signed certs
• Setup LGTM observability stack
• Enable Linkerd Viz & configure to use my "Prometheus" aka Grafana Alloy + Mimir
• Configure/Enable Cilium observability (Hubble et. al.)
• Add Linkerd's Jaeger bits if not covered by Tempo + Grafana
• Add Polaris & check for Linkerd namespace annotation
• Add Velero for general backups
• Add K8up for specific things as I already use Restic
• Add Argo Workflows
• Add Argo Events
• Figure out how to structure all the Argo CD related bits
• Add Renovate & have it watch all charts

[genebean]

Today I finally got Argo CD accessible via an IngressRoute on the IP assigned and announced by Cilium. I'm now working on getting access via the Gateway API's equivalent.