Compare commits
89 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| e98e9aef99 | |||
| 22173b6775 | |||
| af44faeb38 | |||
| 95926e5969 | |||
| 2f2034d025 | |||
| a83e903f66 | |||
| 36579c8fbd | |||
| fc22706b60 | |||
| 34f3ca989e | |||
| baef37523f | |||
| ca1396858b | |||
| fb114abd2a | |||
| 6dbf1a3ee7 | |||
| 77878619c6 | |||
| 070581d5bf | |||
| f82149c899 | |||
| 1f2c9fc59c | |||
| 0f61bb3d23 | |||
| d112483f67 | |||
| dc89eb8b7a | |||
| a3c26ae15a | |||
| 8d8d7d7e28 | |||
| b2a94ed610 | |||
| d1a0241bc1 | |||
| 2d13e64816 | |||
| e01bfd53cf | |||
| c08149937d | |||
| 715848bf4c | |||
| e0b6ed47b8 | |||
| a19dbbb254 | |||
| f01dc10e51 | |||
| c042231d59 | |||
| a62533419d | |||
| 617a4ed64a | |||
| 9345664e58 | |||
| e2372bcbc0 | |||
| 43e7fa5bb1 | |||
| e34798acae | |||
| 7800f94bd8 | |||
| 2209d02317 | |||
| 5ff328e9a9 | |||
| 188cfe9762 | |||
| 8cd3168a23 | |||
| 3189bb8113 | |||
| 1fd2f9e584 | |||
| c7dd3937d0 | |||
| 2c7a5957b6 | |||
| 1e77e9c435 | |||
| f7bbe43b74 | |||
| 57def99160 | |||
| e5231c0ac8 | |||
| 3993ebfbab | |||
| 0f8630d5c8 | |||
| 279f10dd53 | |||
| 540d0c89b4 | |||
| 10eb353d49 | |||
| a1ba9293e4 | |||
| 5c4f59f884 | |||
| 5e894b788f | |||
| e87e994abe | |||
| 7739b42910 | |||
| 90344a4ed1 | |||
| bae5365f78 | |||
| 9f744cf52c | |||
| c4998174df | |||
| 56eb10629c | |||
| c158a3dfb6 | |||
| b86c5329d7 | |||
| 19b4da61cb | |||
| 438b435074 | |||
| afd5fcf028 | |||
| 53228a5ed0 | |||
| be90c83dfe | |||
| 4bd56e9e27 | |||
| ed9de7ac55 | |||
| 413eee85d9 | |||
| 35a6c98f8a | |||
| ceccf974d3 | |||
| 86d60d0a7e | |||
| 99001f2cef | |||
| cf38b587dd | |||
| f70c0de869 | |||
| 45d170379f | |||
| c6a7ab83e4 | |||
| 468ffbc8b4 | |||
| bc01447d89 | |||
| 6b0be4d601 | |||
| 096485f0c2 | |||
| 6d76314845 |
@@ -5,10 +5,8 @@ metadata:
|
||||
namespace: apps
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||
spec:
|
||||
ingressClassName: traefik
|
||||
tls:
|
||||
- hosts:
|
||||
- excalidraw.khalisio.com
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
selector:
|
||||
app: excalidraw
|
||||
ports:
|
||||
- name: http
|
||||
- protocol: TCP
|
||||
port: 80
|
||||
targetPort: 80
|
||||
type: ClusterIP
|
||||
@@ -3,4 +3,4 @@ kind: Namespace
|
||||
metadata:
|
||||
name: apps
|
||||
labels:
|
||||
name: apps
|
||||
kubernetes.io/metadata.name: apps
|
||||
@@ -1,12 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: bazarr-config
|
||||
namespace: media
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: longhorn
|
||||
resources:
|
||||
requests:
|
||||
storage: 2Gi
|
||||
@@ -1,12 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: emby-config
|
||||
namespace: media
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: longhorn
|
||||
resources:
|
||||
requests:
|
||||
storage: 10Gi
|
||||
@@ -1,12 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: lidarr-config
|
||||
namespace: media
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: longhorn
|
||||
resources:
|
||||
requests:
|
||||
storage: 5Gi
|
||||
@@ -15,7 +15,7 @@ spec:
|
||||
spec:
|
||||
containers:
|
||||
- name: bazarr
|
||||
image: ghcr.io/linuxserver/bazarr:develop
|
||||
image: lscr.io/linuxserver/bazarr:latest
|
||||
ports:
|
||||
- containerPort: 6767
|
||||
env:
|
||||
@@ -24,19 +24,14 @@ spec:
|
||||
- name: PGID
|
||||
value: "1000"
|
||||
- name: TZ
|
||||
value: UTC
|
||||
value: "America/New_York"
|
||||
volumeMounts:
|
||||
- name: config
|
||||
mountPath: /config
|
||||
- name: media
|
||||
mountPath: /media
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 256Mi
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
- name: podcasts
|
||||
mountPath: /podcasts
|
||||
volumes:
|
||||
- name: config
|
||||
persistentVolumeClaim:
|
||||
@@ -44,3 +39,6 @@ spec:
|
||||
- name: media
|
||||
persistentVolumeClaim:
|
||||
claimName: media-data
|
||||
- name: podcasts
|
||||
persistentVolumeClaim:
|
||||
claimName: bazarr-podcasts
|
||||
@@ -5,10 +5,7 @@ metadata:
|
||||
namespace: media
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
||||
spec:
|
||||
ingressClassName: traefik
|
||||
tls:
|
||||
- hosts:
|
||||
- bazarr.khalisio.com
|
||||
@@ -24,3 +21,6 @@ spec:
|
||||
name: bazarr
|
||||
port:
|
||||
number: 6767
|
||||
entryPoints:
|
||||
- web
|
||||
- websecure
|
||||
@@ -10,3 +10,4 @@ spec:
|
||||
- port: 6767
|
||||
targetPort: 6767
|
||||
protocol: TCP
|
||||
type: ClusterIP
|
||||
@@ -15,35 +15,26 @@ spec:
|
||||
spec:
|
||||
containers:
|
||||
- name: emby
|
||||
image: ghcr.io/linuxserver/emby:latest
|
||||
image: lscr.io/linuxserver/emby:latest
|
||||
ports:
|
||||
- name: http
|
||||
containerPort: 8096
|
||||
- name: https
|
||||
containerPort: 8920
|
||||
- containerPort: 8096
|
||||
- containerPort: 8920
|
||||
env:
|
||||
- name: PUID
|
||||
value: "1000"
|
||||
- name: PGID
|
||||
value: "1000"
|
||||
- name: TZ
|
||||
value: UTC
|
||||
value: "America/New_York"
|
||||
volumeMounts:
|
||||
- name: config
|
||||
mountPath: /config
|
||||
- name: media
|
||||
mountPath: /media
|
||||
resources:
|
||||
requests:
|
||||
cpu: 500m
|
||||
memory: 1Gi
|
||||
limits:
|
||||
cpu: 4000m
|
||||
memory: 4Gi
|
||||
volumes:
|
||||
- name: config
|
||||
persistentVolumeClaim:
|
||||
claimName: emby-config
|
||||
- name: media
|
||||
persistentVolumeClaim:
|
||||
claimName: media-data
|
||||
claimName: media-data
|
||||
@@ -5,10 +5,7 @@ metadata:
|
||||
namespace: media
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
||||
spec:
|
||||
ingressClassName: traefik
|
||||
tls:
|
||||
- hosts:
|
||||
- emby.khalisio.com
|
||||
@@ -24,3 +21,6 @@ spec:
|
||||
name: emby
|
||||
port:
|
||||
number: 8096
|
||||
entryPoints:
|
||||
- web
|
||||
- websecure
|
||||
@@ -7,11 +7,10 @@ spec:
|
||||
selector:
|
||||
app: emby
|
||||
ports:
|
||||
- name: http
|
||||
port: 8096
|
||||
- port: 8096
|
||||
targetPort: 8096
|
||||
protocol: TCP
|
||||
- name: https
|
||||
port: 8920
|
||||
- port: 8920
|
||||
targetPort: 8920
|
||||
protocol: TCP
|
||||
type: ClusterIP
|
||||
@@ -15,7 +15,7 @@ spec:
|
||||
spec:
|
||||
containers:
|
||||
- name: lidarr
|
||||
image: ghcr.io/linuxserver/lidarr:develop
|
||||
image: lscr.io/linuxserver/lidarr:latest
|
||||
ports:
|
||||
- containerPort: 8686
|
||||
env:
|
||||
@@ -24,19 +24,14 @@ spec:
|
||||
- name: PGID
|
||||
value: "1000"
|
||||
- name: TZ
|
||||
value: UTC
|
||||
value: "America/New_York"
|
||||
volumeMounts:
|
||||
- name: config
|
||||
mountPath: /config
|
||||
- name: media
|
||||
mountPath: /media
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 512Mi
|
||||
limits:
|
||||
cpu: 1000m
|
||||
memory: 1Gi
|
||||
- name: downloads
|
||||
mountPath: /downloads
|
||||
volumes:
|
||||
- name: config
|
||||
persistentVolumeClaim:
|
||||
@@ -44,3 +39,6 @@ spec:
|
||||
- name: media
|
||||
persistentVolumeClaim:
|
||||
claimName: media-data
|
||||
- name: downloads
|
||||
persistentVolumeClaim:
|
||||
claimName: lidarr-downloads
|
||||
@@ -5,10 +5,7 @@ metadata:
|
||||
namespace: media
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
||||
spec:
|
||||
ingressClassName: traefik
|
||||
tls:
|
||||
- hosts:
|
||||
- lidarr.khalisio.com
|
||||
@@ -24,3 +21,6 @@ spec:
|
||||
name: lidarr
|
||||
port:
|
||||
number: 8686
|
||||
entryPoints:
|
||||
- web
|
||||
- websecure
|
||||
@@ -10,3 +10,4 @@ spec:
|
||||
- port: 8686
|
||||
targetPort: 8686
|
||||
protocol: TCP
|
||||
type: ClusterIP
|
||||
@@ -5,8 +5,8 @@ metadata:
|
||||
namespace: media
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: longhorn
|
||||
- ReadWriteMany
|
||||
resources:
|
||||
requests:
|
||||
storage: 50Gi
|
||||
storage: 500Gi
|
||||
storageClassName: longhorn
|
||||
@@ -3,4 +3,4 @@ kind: Namespace
|
||||
metadata:
|
||||
name: media
|
||||
labels:
|
||||
app.kubernetes.io/managed-by: orion
|
||||
app.kubernetes.io/managed-by: orion
|
||||
@@ -15,7 +15,7 @@ spec:
|
||||
spec:
|
||||
containers:
|
||||
- name: prowlarr
|
||||
image: ghcr.io/linuxserver/prowlarr:develop
|
||||
image: lscr.io/linuxserver/prowlarr:latest
|
||||
ports:
|
||||
- containerPort: 9696
|
||||
env:
|
||||
@@ -24,18 +24,11 @@ spec:
|
||||
- name: PGID
|
||||
value: "1000"
|
||||
- name: TZ
|
||||
value: UTC
|
||||
value: "America/New_York"
|
||||
volumeMounts:
|
||||
- name: config
|
||||
mountPath: /config
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 256Mi
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
volumes:
|
||||
- name: config
|
||||
persistentVolumeClaim:
|
||||
claimName: prowlarr-config
|
||||
claimName: prowlarr-config
|
||||
@@ -5,10 +5,7 @@ metadata:
|
||||
namespace: media
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
||||
spec:
|
||||
ingressClassName: traefik
|
||||
tls:
|
||||
- hosts:
|
||||
- prowlarr.khalisio.com
|
||||
@@ -24,3 +21,6 @@ spec:
|
||||
name: prowlarr
|
||||
port:
|
||||
number: 9696
|
||||
entryPoints:
|
||||
- web
|
||||
- websecure
|
||||
@@ -10,3 +10,4 @@ spec:
|
||||
- port: 9696
|
||||
targetPort: 9696
|
||||
protocol: TCP
|
||||
type: ClusterIP
|
||||
@@ -15,7 +15,7 @@ spec:
|
||||
spec:
|
||||
containers:
|
||||
- name: radarr
|
||||
image: ghcr.io/linuxserver/radarr:develop
|
||||
image: lscr.io/linuxserver/radarr:latest
|
||||
ports:
|
||||
- containerPort: 7878
|
||||
env:
|
||||
@@ -24,19 +24,14 @@ spec:
|
||||
- name: PGID
|
||||
value: "1000"
|
||||
- name: TZ
|
||||
value: UTC
|
||||
value: "America/New_York"
|
||||
volumeMounts:
|
||||
- name: config
|
||||
mountPath: /config
|
||||
- name: media
|
||||
mountPath: /media
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 512Mi
|
||||
limits:
|
||||
cpu: 1000m
|
||||
memory: 1Gi
|
||||
- name: downloads
|
||||
mountPath: /downloads
|
||||
volumes:
|
||||
- name: config
|
||||
persistentVolumeClaim:
|
||||
@@ -44,3 +39,6 @@ spec:
|
||||
- name: media
|
||||
persistentVolumeClaim:
|
||||
claimName: media-data
|
||||
- name: downloads
|
||||
persistentVolumeClaim:
|
||||
claimName: radarr-downloads
|
||||
@@ -5,10 +5,7 @@ metadata:
|
||||
namespace: media
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
||||
spec:
|
||||
ingressClassName: traefik
|
||||
tls:
|
||||
- hosts:
|
||||
- radarr.khalisio.com
|
||||
@@ -24,3 +21,6 @@ spec:
|
||||
name: radarr
|
||||
port:
|
||||
number: 7878
|
||||
entryPoints:
|
||||
- web
|
||||
- websecure
|
||||
@@ -10,3 +10,4 @@ spec:
|
||||
- port: 7878
|
||||
targetPort: 7878
|
||||
protocol: TCP
|
||||
type: ClusterIP
|
||||
@@ -15,7 +15,7 @@ spec:
|
||||
spec:
|
||||
containers:
|
||||
- name: readarr
|
||||
image: ghcr.io/linuxserver/readarr:develop
|
||||
image: lscr.io/linuxserver/readarr:develop
|
||||
ports:
|
||||
- containerPort: 8787
|
||||
env:
|
||||
@@ -24,23 +24,21 @@ spec:
|
||||
- name: PGID
|
||||
value: "1000"
|
||||
- name: TZ
|
||||
value: UTC
|
||||
value: "America/New_York"
|
||||
volumeMounts:
|
||||
- name: config
|
||||
mountPath: /config
|
||||
- name: media
|
||||
mountPath: /media
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 256Mi
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
- name: books
|
||||
mountPath: /books
|
||||
- name: downloads
|
||||
mountPath: /downloads
|
||||
volumes:
|
||||
- name: config
|
||||
persistentVolumeClaim:
|
||||
claimName: readarr-config
|
||||
- name: media
|
||||
- name: books
|
||||
persistentVolumeClaim:
|
||||
claimName: media-data
|
||||
claimName: readarr-books
|
||||
- name: downloads
|
||||
persistentVolumeClaim:
|
||||
claimName: readarr-downloads
|
||||
@@ -5,10 +5,7 @@ metadata:
|
||||
namespace: media
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
||||
spec:
|
||||
ingressClassName: traefik
|
||||
tls:
|
||||
- hosts:
|
||||
- readarr.khalisio.com
|
||||
@@ -24,3 +21,6 @@ spec:
|
||||
name: readarr
|
||||
port:
|
||||
number: 8787
|
||||
entryPoints:
|
||||
- web
|
||||
- websecure
|
||||
@@ -10,3 +10,4 @@ spec:
|
||||
- port: 8787
|
||||
targetPort: 8787
|
||||
protocol: TCP
|
||||
type: ClusterIP
|
||||
@@ -15,7 +15,7 @@ spec:
|
||||
spec:
|
||||
containers:
|
||||
- name: sonarr
|
||||
image: ghcr.io/linuxserver/sonarr:develop
|
||||
image: lscr.io/linuxserver/sonarr:develop
|
||||
ports:
|
||||
- containerPort: 8989
|
||||
env:
|
||||
@@ -24,19 +24,14 @@ spec:
|
||||
- name: PGID
|
||||
value: "1000"
|
||||
- name: TZ
|
||||
value: UTC
|
||||
value: "America/New_York"
|
||||
volumeMounts:
|
||||
- name: config
|
||||
mountPath: /config
|
||||
- name: media
|
||||
mountPath: /media
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 512Mi
|
||||
limits:
|
||||
cpu: 1000m
|
||||
memory: 1Gi
|
||||
- name: downloads
|
||||
mountPath: /downloads
|
||||
volumes:
|
||||
- name: config
|
||||
persistentVolumeClaim:
|
||||
@@ -44,3 +39,6 @@ spec:
|
||||
- name: media
|
||||
persistentVolumeClaim:
|
||||
claimName: media-data
|
||||
- name: downloads
|
||||
persistentVolumeClaim:
|
||||
claimName: sonarr-downloads
|
||||
@@ -5,10 +5,7 @@ metadata:
|
||||
namespace: media
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
||||
spec:
|
||||
ingressClassName: traefik
|
||||
tls:
|
||||
- hosts:
|
||||
- sonarr.khalisio.com
|
||||
@@ -24,3 +21,6 @@ spec:
|
||||
name: sonarr
|
||||
port:
|
||||
number: 8989
|
||||
entryPoints:
|
||||
- web
|
||||
- websecure
|
||||
@@ -10,3 +10,4 @@ spec:
|
||||
- port: 8989
|
||||
targetPort: 8989
|
||||
protocol: TCP
|
||||
type: ClusterIP
|
||||
@@ -1,12 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: prowlarr-config
|
||||
namespace: media
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: longhorn
|
||||
resources:
|
||||
requests:
|
||||
storage: 2Gi
|
||||
@@ -1,12 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: radarr-config
|
||||
namespace: media
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: longhorn
|
||||
resources:
|
||||
requests:
|
||||
storage: 5Gi
|
||||
@@ -1,12 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: readarr-config
|
||||
namespace: media
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: longhorn
|
||||
resources:
|
||||
requests:
|
||||
storage: 2Gi
|
||||
@@ -1,12 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: sonarr-config
|
||||
namespace: media
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: longhorn
|
||||
resources:
|
||||
requests:
|
||||
storage: 5Gi
|
||||
@@ -1,43 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: tailscale-operator
|
||||
namespace: tailscale
|
||||
labels:
|
||||
app: tailscale-operator
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: tailscale-operator
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: tailscale-operator
|
||||
spec:
|
||||
serviceAccountName: tailscale-operator
|
||||
containers:
|
||||
- name: operator
|
||||
image: ghcr.io/tailscale/k8s-operator:v1.78.3
|
||||
env:
|
||||
- name: POD_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.name
|
||||
- name: POD_NAMESPACE
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.namespace
|
||||
- name: CLIENT_ID_FILE
|
||||
value: /etc/tailscale/operator/client-id
|
||||
- name: CLIENT_SECRET_FILE
|
||||
value: /etc/tailscale/operator/client-secret
|
||||
volumeMounts:
|
||||
- name: operator-secret
|
||||
mountPath: /etc/tailscale/operator
|
||||
readOnly: true
|
||||
resources: {}
|
||||
volumes:
|
||||
- name: operator-secret
|
||||
secret:
|
||||
secretName: tailscale-operator-secret
|
||||
@@ -1,42 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: tailscale-operator
|
||||
namespace: tailscale
|
||||
labels:
|
||||
app: tailscale-operator
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: tailscale-operator
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: tailscale-operator
|
||||
spec:
|
||||
serviceAccountName: tailscale-operator
|
||||
containers:
|
||||
- name: operator
|
||||
image: ghcr.io/tailscale/k8s-operator:v1.78.3
|
||||
env:
|
||||
- name: POD_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.name
|
||||
- name: POD_NAMESPACE
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.namespace
|
||||
- name: TS_CLIENT_ID_FILE
|
||||
value: /etc/tailscale/oauth/client-id
|
||||
- name: TS_CLIENT_SECRET_FILE
|
||||
value: /etc/tailscale/oauth/client-secret
|
||||
volumeMounts:
|
||||
- name: oauth-secret
|
||||
mountPath: /etc/tailscale/oauth
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: oauth-secret
|
||||
secret:
|
||||
secretName: tailscale-operator-secret
|
||||
@@ -1,42 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: tailscale-operator
|
||||
namespace: tailscale
|
||||
labels:
|
||||
app: tailscale-operator
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: tailscale-operator
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: tailscale-operator
|
||||
spec:
|
||||
serviceAccountName: tailscale-operator
|
||||
containers:
|
||||
- name: operator
|
||||
image: ghcr.io/tailscale/k8s-operator:v1.78.3
|
||||
env:
|
||||
- name: POD_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.name
|
||||
- name: POD_NAMESPACE
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.namespace
|
||||
- name: TS_CLIENT_ID_FILE
|
||||
value: /etc/tailscale/oauth/client-id
|
||||
- name: TS_CLIENT_SECRET_FILE
|
||||
value: /etc/tailscale/oauth/client-secret
|
||||
volumeMounts:
|
||||
- name: oauth-secret
|
||||
mountPath: /etc/tailscale/oauth
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: oauth-secret
|
||||
secret:
|
||||
secretName: tailscale-operator-secret
|
||||
Reference in New Issue
Block a user