Compare commits
2 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 782c787430 | |||
| 52388ec19f |
@@ -1,4 +1,4 @@
|
|||||||
apiVersion: external-secrets.io/v1beta1
|
apiVersion: external-secrets.io/v1
|
||||||
kind: ExternalSecret
|
kind: ExternalSecret
|
||||||
metadata:
|
metadata:
|
||||||
name: n8n-secret
|
name: n8n-secret
|
||||||
@@ -6,13 +6,33 @@ metadata:
|
|||||||
spec:
|
spec:
|
||||||
refreshInterval: 1h
|
refreshInterval: 1h
|
||||||
secretStoreRef:
|
secretStoreRef:
|
||||||
name: vault
|
name: orion-vault
|
||||||
kind: ClusterSecretStore
|
kind: ClusterSecretStore
|
||||||
target:
|
target:
|
||||||
name: n8n-secret
|
name: n8n-secret
|
||||||
creationPolicy: Owner
|
creationPolicy: Owner
|
||||||
data:
|
data:
|
||||||
- secretKey: N8N_ENCRYPTION_KEY
|
- secretKey: N8N_SECRET_KEY
|
||||||
remoteRef:
|
remoteRef:
|
||||||
key: secret/data/Talos Cluster/apps/n8n
|
key: apps/n8n
|
||||||
property: N8N_ENCRYPTION_KEY
|
property: N8N_SECRET_KEY
|
||||||
|
- secretKey: DB_HOST
|
||||||
|
remoteRef:
|
||||||
|
key: apps/n8n
|
||||||
|
property: DB_HOST
|
||||||
|
- secretKey: DB_PORT
|
||||||
|
remoteRef:
|
||||||
|
key: apps/n8n
|
||||||
|
property: DB_PORT
|
||||||
|
- secretKey: DB_NAME
|
||||||
|
remoteRef:
|
||||||
|
key: apps/n8n
|
||||||
|
property: DB_NAME
|
||||||
|
- secretKey: DB_USER
|
||||||
|
remoteRef:
|
||||||
|
key: apps/n8n
|
||||||
|
property: DB_USER
|
||||||
|
- secretKey: DB_PASSWORD
|
||||||
|
remoteRef:
|
||||||
|
key: apps/n8n
|
||||||
|
property: DB_PASSWORD
|
||||||
|
|||||||
@@ -1,36 +0,0 @@
|
|||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
name: tailscale-operator
|
|
||||||
namespace: tailscale
|
|
||||||
labels:
|
|
||||||
app: tailscale-operator
|
|
||||||
spec:
|
|
||||||
replicas: 1
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: tailscale-operator
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: tailscale-operator
|
|
||||||
spec:
|
|
||||||
serviceAccountName: tailscale-operator
|
|
||||||
containers:
|
|
||||||
- name: tailscale-operator
|
|
||||||
image: ghcr.io/tailscale/tailscale-operator:v1.78.0
|
|
||||||
ports:
|
|
||||||
- containerPort: 8080
|
|
||||||
env:
|
|
||||||
- name: TS_AUTH_KEY
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: tailscale-auth
|
|
||||||
key: TS_AUTH_KEY
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 100m
|
|
||||||
memory: 128Mi
|
|
||||||
limits:
|
|
||||||
cpu: 500m
|
|
||||||
memory: 512Mi
|
|
||||||
@@ -1,18 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: tailscale-auth
|
|
||||||
namespace: tailscale
|
|
||||||
spec:
|
|
||||||
refreshInterval: 1h
|
|
||||||
secretStoreRef:
|
|
||||||
name: orion-vault
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
target:
|
|
||||||
name: tailscale-auth
|
|
||||||
creationPolicy: Owner
|
|
||||||
data:
|
|
||||||
- secretKey: TS_AUTH_KEY
|
|
||||||
remoteRef:
|
|
||||||
key: secret/tailscale
|
|
||||||
property: TS_AUTH_KEY
|
|
||||||
@@ -1,6 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Namespace
|
|
||||||
metadata:
|
|
||||||
name: tailscale
|
|
||||||
labels:
|
|
||||||
app: tailscale
|
|
||||||
@@ -1,33 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: ServiceAccount
|
|
||||||
metadata:
|
|
||||||
name: tailscale-operator
|
|
||||||
namespace: tailscale
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRole
|
|
||||||
metadata:
|
|
||||||
name: tailscale-operator
|
|
||||||
rules:
|
|
||||||
- apiGroups: [""]
|
|
||||||
resources: ["pods", "services", "secrets", "configmaps", "nodes"]
|
|
||||||
verbs: ["get", "list", "watch"]
|
|
||||||
- apiGroups: ["networking.k8s.io"]
|
|
||||||
resources: ["ingresses"]
|
|
||||||
verbs: ["get", "list", "watch", "update"]
|
|
||||||
- apiGroups: ["tailscale.com"]
|
|
||||||
resources: ["*"]
|
|
||||||
verbs: ["*"]
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: tailscale-operator
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: tailscale-operator
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: tailscale-operator
|
|
||||||
namespace: tailscale
|
|
||||||
Reference in New Issue
Block a user