Compare commits

..

82 Commits

Author SHA1 Message Date
gitea-admin 810c48a469 restructure: organize apps under namespace folders
Validate Manifests / validate (pull_request) Has been cancelled
2026-05-17 22:26:39 +00:00
gitea-admin 34f3ca989e Delete directory 'deployments/emby' 2026-05-17 22:19:26 +00:00
gitea-admin baef37523f Delete directory 'tailscale' 2026-05-17 22:19:07 +00:00
gitea-admin ca1396858b Merge pull request 'feat: reorganize media apps under namespace folders with media PVC' (#57) from orion/auto/feat-reorganize-media-apps-under-namespa-1779056222548 into main
Reviewed-on: #57
2026-05-17 22:18:21 +00:00
gitea-admin fb114abd2a Merge pull request 'refactor: organize media apps into namespaces with proper folder structure' (#58) from orion/auto/refactor-organize-media-apps-into-namesp-1779056277071 into main
Reviewed-on: #58
2026-05-17 22:18:13 +00:00
gitea-admin 6dbf1a3ee7 refactor: organize media apps into namespaces with proper folder structure
Validate Manifests / validate (pull_request) Has been cancelled
2026-05-17 22:17:59 +00:00
gitea-admin 77878619c6 refactor: organize media apps into namespaces with proper folder structure 2026-05-17 22:17:58 +00:00
gitea-admin 070581d5bf refactor: organize media apps into namespaces with proper folder structure 2026-05-17 22:17:58 +00:00
gitea-admin f82149c899 refactor: organize media apps into namespaces with proper folder structure 2026-05-17 22:17:58 +00:00
gitea-admin 1f2c9fc59c refactor: organize media apps into namespaces with proper folder structure 2026-05-17 22:17:57 +00:00
gitea-admin 0f61bb3d23 refactor: organize media apps into namespaces with proper folder structure 2026-05-17 22:17:57 +00:00
gitea-admin d112483f67 refactor: organize media apps into namespaces with proper folder structure 2026-05-17 22:17:57 +00:00
gitea-admin dc89eb8b7a feat: reorganize media apps under namespace folders with media PVC
Validate Manifests / validate (pull_request) Has been cancelled
2026-05-17 22:17:09 +00:00
gitea-admin a3c26ae15a feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:09 +00:00
gitea-admin 8d8d7d7e28 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:08 +00:00
gitea-admin b2a94ed610 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:08 +00:00
gitea-admin d1a0241bc1 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:08 +00:00
gitea-admin 2d13e64816 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:07 +00:00
gitea-admin e01bfd53cf feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:07 +00:00
gitea-admin c08149937d feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:07 +00:00
gitea-admin 715848bf4c feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:06 +00:00
gitea-admin e0b6ed47b8 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:06 +00:00
gitea-admin a19dbbb254 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:06 +00:00
gitea-admin f01dc10e51 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:06 +00:00
gitea-admin c042231d59 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:05 +00:00
gitea-admin a62533419d feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:05 +00:00
gitea-admin 617a4ed64a feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:05 +00:00
gitea-admin 9345664e58 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:04 +00:00
gitea-admin e2372bcbc0 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:04 +00:00
gitea-admin 43e7fa5bb1 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:04 +00:00
gitea-admin e34798acae feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:03 +00:00
gitea-admin 7800f94bd8 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:03 +00:00
gitea-admin 2209d02317 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:03 +00:00
gitea-admin 5ff328e9a9 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:03 +00:00
gitea-admin 188cfe9762 feat: reorganize media apps under namespace folders with media PVC 2026-05-17 22:17:02 +00:00
gitea-admin 8cd3168a23 Merge pull request 'refactor: reorganize manifests into namespace folders' (#56) from orion/auto/refactor-reorganize-manifests-into-names-1779056072745 into main
Reviewed-on: #56
2026-05-17 22:16:50 +00:00
gitea-admin 3189bb8113 refactor: reorganize manifests into namespace folders
Validate Manifests / validate (pull_request) Has been cancelled
2026-05-17 22:14:45 +00:00
gitea-admin 1fd2f9e584 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:45 +00:00
gitea-admin c7dd3937d0 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:44 +00:00
gitea-admin 2c7a5957b6 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:44 +00:00
gitea-admin 1e77e9c435 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:44 +00:00
gitea-admin f7bbe43b74 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:44 +00:00
gitea-admin 57def99160 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:43 +00:00
gitea-admin e5231c0ac8 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:43 +00:00
gitea-admin 3993ebfbab refactor: reorganize manifests into namespace folders 2026-05-17 22:14:43 +00:00
gitea-admin 0f8630d5c8 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:42 +00:00
gitea-admin 279f10dd53 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:42 +00:00
gitea-admin 540d0c89b4 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:42 +00:00
gitea-admin 10eb353d49 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:42 +00:00
gitea-admin a1ba9293e4 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:41 +00:00
gitea-admin 5c4f59f884 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:41 +00:00
gitea-admin 5e894b788f refactor: reorganize manifests into namespace folders 2026-05-17 22:14:41 +00:00
gitea-admin e87e994abe refactor: reorganize manifests into namespace folders 2026-05-17 22:14:40 +00:00
gitea-admin 7739b42910 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:40 +00:00
gitea-admin 90344a4ed1 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:40 +00:00
gitea-admin bae5365f78 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:40 +00:00
gitea-admin 9f744cf52c refactor: reorganize manifests into namespace folders 2026-05-17 22:14:39 +00:00
gitea-admin c4998174df refactor: reorganize manifests into namespace folders 2026-05-17 22:14:39 +00:00
gitea-admin 56eb10629c refactor: reorganize manifests into namespace folders 2026-05-17 22:14:39 +00:00
gitea-admin c158a3dfb6 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:38 +00:00
gitea-admin b86c5329d7 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:38 +00:00
gitea-admin 19b4da61cb refactor: reorganize manifests into namespace folders 2026-05-17 22:14:38 +00:00
gitea-admin 438b435074 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:38 +00:00
gitea-admin afd5fcf028 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:37 +00:00
gitea-admin 53228a5ed0 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:37 +00:00
gitea-admin be90c83dfe refactor: reorganize manifests into namespace folders 2026-05-17 22:14:37 +00:00
gitea-admin 4bd56e9e27 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:36 +00:00
gitea-admin ed9de7ac55 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:36 +00:00
gitea-admin 413eee85d9 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:36 +00:00
gitea-admin 35a6c98f8a refactor: reorganize manifests into namespace folders 2026-05-17 22:14:36 +00:00
gitea-admin ceccf974d3 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:35 +00:00
gitea-admin 86d60d0a7e refactor: reorganize manifests into namespace folders 2026-05-17 22:14:35 +00:00
gitea-admin 99001f2cef refactor: reorganize manifests into namespace folders 2026-05-17 22:14:35 +00:00
gitea-admin cf38b587dd refactor: reorganize manifests into namespace folders 2026-05-17 22:14:35 +00:00
gitea-admin f70c0de869 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:34 +00:00
gitea-admin 45d170379f refactor: reorganize manifests into namespace folders 2026-05-17 22:14:34 +00:00
gitea-admin c6a7ab83e4 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:34 +00:00
gitea-admin 468ffbc8b4 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:33 +00:00
gitea-admin bc01447d89 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:33 +00:00
gitea-admin 6b0be4d601 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:33 +00:00
gitea-admin 096485f0c2 refactor: reorganize manifests into namespace folders 2026-05-17 22:14:33 +00:00
gitea-admin 6d76314845 Merge pull request 'deploy Arr Stack + Emby to media namespace' (#55) from orion/auto/deploy-arr-stack-emby-to-media-namespace-1779055509777 into main
Reviewed-on: #55
2026-05-17 22:11:55 +00:00
34 changed files with 87 additions and 313 deletions
-12
View File
@@ -1,12 +0,0 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: bazarr-config
namespace: media
spec:
accessModes:
- ReadWriteOnce
storageClassName: longhorn
resources:
requests:
storage: 2Gi
-12
View File
@@ -1,12 +0,0 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: emby-config
namespace: media
spec:
accessModes:
- ReadWriteOnce
storageClassName: longhorn
resources:
requests:
storage: 10Gi
+6
View File
@@ -0,0 +1,6 @@
apiVersion: v1
kind: Namespace
metadata:
name: excalidraw
labels:
kubernetes.io/metadata.name: excalidraw
-12
View File
@@ -1,12 +0,0 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: lidarr-config
namespace: media
spec:
accessModes:
- ReadWriteOnce
storageClassName: longhorn
resources:
requests:
storage: 5Gi
@@ -15,7 +15,7 @@ spec:
spec:
containers:
- name: bazarr
image: ghcr.io/linuxserver/bazarr:develop
image: lscr.io/linuxserver/bazarr:latest
ports:
- containerPort: 6767
env:
@@ -24,19 +24,14 @@ spec:
- name: PGID
value: "1000"
- name: TZ
value: UTC
value: "America/New_York"
volumeMounts:
- name: config
mountPath: /config
- name: media
mountPath: /media
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: 500m
memory: 512Mi
- name: podcasts
mountPath: /podcasts
volumes:
- name: config
persistentVolumeClaim:
@@ -44,3 +39,6 @@ spec:
- name: media
persistentVolumeClaim:
claimName: media-data
- name: podcasts
persistentVolumeClaim:
claimName: bazarr-podcasts
@@ -5,10 +5,7 @@ metadata:
namespace: media
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
traefik.ingress.kubernetes.io/router.tls: "true"
spec:
ingressClassName: traefik
tls:
- hosts:
- bazarr.khalisio.com
@@ -24,3 +21,6 @@ spec:
name: bazarr
port:
number: 6767
entryPoints:
- web
- websecure
@@ -10,3 +10,4 @@ spec:
- port: 6767
targetPort: 6767
protocol: TCP
type: ClusterIP
@@ -15,35 +15,26 @@ spec:
spec:
containers:
- name: emby
image: ghcr.io/linuxserver/emby:latest
image: lscr.io/linuxserver/emby:latest
ports:
- name: http
containerPort: 8096
- name: https
containerPort: 8920
- containerPort: 8096
- containerPort: 8920
env:
- name: PUID
value: "1000"
- name: PGID
value: "1000"
- name: TZ
value: UTC
value: "America/New_York"
volumeMounts:
- name: config
mountPath: /config
- name: media
mountPath: /media
resources:
requests:
cpu: 500m
memory: 1Gi
limits:
cpu: 4000m
memory: 4Gi
volumes:
- name: config
persistentVolumeClaim:
claimName: emby-config
- name: media
persistentVolumeClaim:
claimName: media-data
claimName: media-data
@@ -5,10 +5,7 @@ metadata:
namespace: media
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
traefik.ingress.kubernetes.io/router.tls: "true"
spec:
ingressClassName: traefik
tls:
- hosts:
- emby.khalisio.com
@@ -24,3 +21,6 @@ spec:
name: emby
port:
number: 8096
entryPoints:
- web
- websecure
@@ -7,11 +7,10 @@ spec:
selector:
app: emby
ports:
- name: http
port: 8096
- port: 8096
targetPort: 8096
protocol: TCP
- name: https
port: 8920
- port: 8920
targetPort: 8920
protocol: TCP
type: ClusterIP
@@ -15,7 +15,7 @@ spec:
spec:
containers:
- name: lidarr
image: ghcr.io/linuxserver/lidarr:develop
image: lscr.io/linuxserver/lidarr:latest
ports:
- containerPort: 8686
env:
@@ -24,19 +24,14 @@ spec:
- name: PGID
value: "1000"
- name: TZ
value: UTC
value: "America/New_York"
volumeMounts:
- name: config
mountPath: /config
- name: media
mountPath: /media
resources:
requests:
cpu: 100m
memory: 512Mi
limits:
cpu: 1000m
memory: 1Gi
- name: downloads
mountPath: /downloads
volumes:
- name: config
persistentVolumeClaim:
@@ -44,3 +39,6 @@ spec:
- name: media
persistentVolumeClaim:
claimName: media-data
- name: downloads
persistentVolumeClaim:
claimName: lidarr-downloads
@@ -5,10 +5,7 @@ metadata:
namespace: media
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
traefik.ingress.kubernetes.io/router.tls: "true"
spec:
ingressClassName: traefik
tls:
- hosts:
- lidarr.khalisio.com
@@ -24,3 +21,6 @@ spec:
name: lidarr
port:
number: 8686
entryPoints:
- web
- websecure
@@ -10,3 +10,4 @@ spec:
- port: 8686
targetPort: 8686
protocol: TCP
type: ClusterIP
@@ -5,8 +5,8 @@ metadata:
namespace: media
spec:
accessModes:
- ReadWriteOnce
storageClassName: longhorn
- ReadWriteMany
resources:
requests:
storage: 50Gi
storage: 500Gi
storageClassName: longhorn
@@ -3,4 +3,4 @@ kind: Namespace
metadata:
name: media
labels:
app.kubernetes.io/managed-by: orion
app.kubernetes.io/managed-by: orion
@@ -15,7 +15,7 @@ spec:
spec:
containers:
- name: prowlarr
image: ghcr.io/linuxserver/prowlarr:develop
image: lscr.io/linuxserver/prowlarr:latest
ports:
- containerPort: 9696
env:
@@ -24,18 +24,11 @@ spec:
- name: PGID
value: "1000"
- name: TZ
value: UTC
value: "America/New_York"
volumeMounts:
- name: config
mountPath: /config
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: 500m
memory: 512Mi
volumes:
- name: config
persistentVolumeClaim:
claimName: prowlarr-config
claimName: prowlarr-config
@@ -5,10 +5,7 @@ metadata:
namespace: media
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
traefik.ingress.kubernetes.io/router.tls: "true"
spec:
ingressClassName: traefik
tls:
- hosts:
- prowlarr.khalisio.com
@@ -24,3 +21,6 @@ spec:
name: prowlarr
port:
number: 9696
entryPoints:
- web
- websecure
@@ -10,3 +10,4 @@ spec:
- port: 9696
targetPort: 9696
protocol: TCP
type: ClusterIP
@@ -15,7 +15,7 @@ spec:
spec:
containers:
- name: radarr
image: ghcr.io/linuxserver/radarr:develop
image: lscr.io/linuxserver/radarr:latest
ports:
- containerPort: 7878
env:
@@ -24,19 +24,14 @@ spec:
- name: PGID
value: "1000"
- name: TZ
value: UTC
value: "America/New_York"
volumeMounts:
- name: config
mountPath: /config
- name: media
mountPath: /media
resources:
requests:
cpu: 100m
memory: 512Mi
limits:
cpu: 1000m
memory: 1Gi
- name: downloads
mountPath: /downloads
volumes:
- name: config
persistentVolumeClaim:
@@ -44,3 +39,6 @@ spec:
- name: media
persistentVolumeClaim:
claimName: media-data
- name: downloads
persistentVolumeClaim:
claimName: radarr-downloads
@@ -5,10 +5,7 @@ metadata:
namespace: media
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
traefik.ingress.kubernetes.io/router.tls: "true"
spec:
ingressClassName: traefik
tls:
- hosts:
- radarr.khalisio.com
@@ -24,3 +21,6 @@ spec:
name: radarr
port:
number: 7878
entryPoints:
- web
- websecure
@@ -10,3 +10,4 @@ spec:
- port: 7878
targetPort: 7878
protocol: TCP
type: ClusterIP
@@ -15,7 +15,7 @@ spec:
spec:
containers:
- name: readarr
image: ghcr.io/linuxserver/readarr:develop
image: lscr.io/linuxserver/readarr:develop
ports:
- containerPort: 8787
env:
@@ -24,23 +24,21 @@ spec:
- name: PGID
value: "1000"
- name: TZ
value: UTC
value: "America/New_York"
volumeMounts:
- name: config
mountPath: /config
- name: media
mountPath: /media
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: 500m
memory: 512Mi
- name: books
mountPath: /books
- name: downloads
mountPath: /downloads
volumes:
- name: config
persistentVolumeClaim:
claimName: readarr-config
- name: media
- name: books
persistentVolumeClaim:
claimName: media-data
claimName: readarr-books
- name: downloads
persistentVolumeClaim:
claimName: readarr-downloads
@@ -5,10 +5,7 @@ metadata:
namespace: media
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
traefik.ingress.kubernetes.io/router.tls: "true"
spec:
ingressClassName: traefik
tls:
- hosts:
- readarr.khalisio.com
@@ -24,3 +21,6 @@ spec:
name: readarr
port:
number: 8787
entryPoints:
- web
- websecure
@@ -10,3 +10,4 @@ spec:
- port: 8787
targetPort: 8787
protocol: TCP
type: ClusterIP
@@ -15,7 +15,7 @@ spec:
spec:
containers:
- name: sonarr
image: ghcr.io/linuxserver/sonarr:develop
image: lscr.io/linuxserver/sonarr:develop
ports:
- containerPort: 8989
env:
@@ -24,19 +24,14 @@ spec:
- name: PGID
value: "1000"
- name: TZ
value: UTC
value: "America/New_York"
volumeMounts:
- name: config
mountPath: /config
- name: media
mountPath: /media
resources:
requests:
cpu: 100m
memory: 512Mi
limits:
cpu: 1000m
memory: 1Gi
- name: downloads
mountPath: /downloads
volumes:
- name: config
persistentVolumeClaim:
@@ -44,3 +39,6 @@ spec:
- name: media
persistentVolumeClaim:
claimName: media-data
- name: downloads
persistentVolumeClaim:
claimName: sonarr-downloads
@@ -5,10 +5,7 @@ metadata:
namespace: media
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
traefik.ingress.kubernetes.io/router.tls: "true"
spec:
ingressClassName: traefik
tls:
- hosts:
- sonarr.khalisio.com
@@ -24,3 +21,6 @@ spec:
name: sonarr
port:
number: 8989
entryPoints:
- web
- websecure
@@ -10,3 +10,4 @@ spec:
- port: 8989
targetPort: 8989
protocol: TCP
type: ClusterIP
-12
View File
@@ -1,12 +0,0 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: prowlarr-config
namespace: media
spec:
accessModes:
- ReadWriteOnce
storageClassName: longhorn
resources:
requests:
storage: 2Gi
-12
View File
@@ -1,12 +0,0 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: radarr-config
namespace: media
spec:
accessModes:
- ReadWriteOnce
storageClassName: longhorn
resources:
requests:
storage: 5Gi
-12
View File
@@ -1,12 +0,0 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: readarr-config
namespace: media
spec:
accessModes:
- ReadWriteOnce
storageClassName: longhorn
resources:
requests:
storage: 2Gi
-12
View File
@@ -1,12 +0,0 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: sonarr-config
namespace: media
spec:
accessModes:
- ReadWriteOnce
storageClassName: longhorn
resources:
requests:
storage: 5Gi
-43
View File
@@ -1,43 +0,0 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: tailscale-operator
namespace: tailscale
labels:
app: tailscale-operator
spec:
replicas: 1
selector:
matchLabels:
app: tailscale-operator
template:
metadata:
labels:
app: tailscale-operator
spec:
serviceAccountName: tailscale-operator
containers:
- name: operator
image: ghcr.io/tailscale/k8s-operator:v1.78.3
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: CLIENT_ID_FILE
value: /etc/tailscale/operator/client-id
- name: CLIENT_SECRET_FILE
value: /etc/tailscale/operator/client-secret
volumeMounts:
- name: operator-secret
mountPath: /etc/tailscale/operator
readOnly: true
resources: {}
volumes:
- name: operator-secret
secret:
secretName: tailscale-operator-secret
-42
View File
@@ -1,42 +0,0 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: tailscale-operator
namespace: tailscale
labels:
app: tailscale-operator
spec:
replicas: 1
selector:
matchLabels:
app: tailscale-operator
template:
metadata:
labels:
app: tailscale-operator
spec:
serviceAccountName: tailscale-operator
containers:
- name: operator
image: ghcr.io/tailscale/k8s-operator:v1.78.3
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: TS_CLIENT_ID_FILE
value: /etc/tailscale/oauth/client-id
- name: TS_CLIENT_SECRET_FILE
value: /etc/tailscale/oauth/client-secret
volumeMounts:
- name: oauth-secret
mountPath: /etc/tailscale/oauth
readOnly: true
volumes:
- name: oauth-secret
secret:
secretName: tailscale-operator-secret
@@ -1,42 +0,0 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: tailscale-operator
namespace: tailscale
labels:
app: tailscale-operator
spec:
replicas: 1
selector:
matchLabels:
app: tailscale-operator
template:
metadata:
labels:
app: tailscale-operator
spec:
serviceAccountName: tailscale-operator
containers:
- name: operator
image: ghcr.io/tailscale/k8s-operator:v1.78.3
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: TS_CLIENT_ID_FILE
value: /etc/tailscale/oauth/client-id
- name: TS_CLIENT_SECRET_FILE
value: /etc/tailscale/oauth/client-secret
volumeMounts:
- name: oauth-secret
mountPath: /etc/tailscale/oauth
readOnly: true
volumes:
- name: oauth-secret
secret:
secretName: tailscale-operator-secret