platform/manifests
1
1
Fork 0
Code Issues 7 Pull Requests 6 Actions Packages Projects Releases Wiki Activity

fix: update headscale acls

Browse Source
This commit is contained in:
Jonas Juselius
2025-10-14 11:13:47 +02:00
parent d782913d94
commit 284a02be7b
2 changed files with 52 additions and 73 deletions
Download Patch File Download Diff File Expand all files Collapse all files
values/headscale-router/values/values.yaml
+24 -34
View File
@@ -106,8 +106,8 @@ configMaps:
"tagOwners": {
"tag:k8s": [ "group:admin" ],
"tag:hpc": [ "group:admin" ],
"tag:tos-relay": [ "group:admin" ],
"tag:vtn-relay": [ "group:admin" ],
"tag:tos-router": [ "group:admin" ],
"tag:vtn-router": [ "group:admin" ],
"tag:mumindalen": [ "group:admin" ],
"tag:ekman": [ "group:admin" ],
"tag:rossby": [ "group:admin" ],
@@ -117,40 +117,30 @@ configMaps:
// as they're prone to be hijacked by replacing their IP addresses.
// see https://github.com/tailscale/tailscale/issues/3800 for more information.
"hosts": {
"ingress.ekman.tos": "10.255.241.99/32",
"ingress.ceph.tos": "10.255.241.10/32",
"ingress.ceph.vtn": "172.16.239.50/32",
"ingress.adm.ceph.vtn": "172.16.239.51/32",
"ingress.oceanbox.tos": "10.255.241.11/32",
"manage.ekman.tos": "10.255.241.99/32",
"k8s.oceanbox.tos": "10.255.241.200/32",
"k8s.ekman.tos": "10.255.241.99/32",
"k8s.ceph.tos": "10.255.241.29/32",
"printer.office.tos": "10.132.46.108/32",
"net.office.tos": "10.132.46.0/24",
"net.dc.tos": "10.255.241.0/24",
"net.100gbe.tos": "10.255.244.0/24",
"net.mgmt.tos": "10.255.240.0/24",
"net.dc.vtn": "172.16.239.0/24",
"net.mgmt.vtn": "172.16.238.0/24",
"office.tos.net": "10.132.46.0/24",
"dc.tos.net": "10.255.241.0/24",
"100gbe.tos.net": "10.255.244.0/24",
"mgmt.tos.net": "10.255.240.0/24",
"dc.vtn.net": "172.16.239.0/24",
"mgmt.vtn.net": "172.16.238.0/24",
},
"acls": [
{
"action": "accept",
"src": [ "tag:tos-relay", "net.dc.tos" ],
"dst": [
"tag:vtn-relay:*",
"net.dc.vtn:*",
]
},
{
"action": "accept",
"src": [ "tag:vtn-relay", "net.dc.vtn" ],
"dst": [
"tag:tos-relay:*",
"net.dc.tos:*",
]
},
{
"action": "accept",
"src": [ "tag:tos-router", "dc.tos.net" ],
"dst": [
"tag:vtn-router:*",
"dc.vtn.net:*",
]
},
{
"action": "accept",
"src": [ "tag:vtn-router", "dc.vtn.net" ],
"dst": [
"tag:tos-router:*",
"dc.tos.net:*",
]
},
]
}
dns: