headscale: add acl and dns for hel0

This commit is contained in:
2026-08-13 14:53:54 +02:00
parent 5cd3341aec
commit 5bb43fa8a3
+13 -20
View File
@@ -153,8 +153,6 @@ configMaps:
"hosts": {
"ingress.ekman.tos": "10.255.241.99/32",
"ingress.ceph.tos": "10.255.241.10/32",
"ingress.ceph.vtn": "172.16.239.50/32",
"ingress.adm.ceph.vtn": "172.16.239.51/32",
"ingress.oceanbox.tos": "10.255.241.11/32",
"manage.ekman.tos": "10.255.241.99/32",
"k8s.oceanbox.tos": "10.255.241.200/32",
@@ -165,9 +163,11 @@ configMaps:
"dc.tos.net": "10.255.241.0/24",
"gbe100.tos.net": "10.255.244.0/24",
"mgmt.tos.net": "10.255.240.0/24",
"dc.vtn.net": "172.16.239.0/24",
"mgmt.vtn.net": "172.16.238.0/24",
"dc.hel1.net": "10.0.1.0/24",
"n1.hel0": "65.109.27.97/32",
"n2.hel0": "65.21.138.120/32",
"n3.hel0": "95.217.77.113/32",
"n4.hel0": "135.181.77.161/32",
},
"acls": [
{
@@ -183,10 +183,12 @@ configMaps:
"dc.tos.net:*",
"mgmt.tos.net:*",
"office.tos.net:*",
"dc.vtn.net:*",
"mgmt.vtn.net:*",
"dc.hel1.net:*",
"100.64.0.0/10:*",
"n1.hel0:*",
"n2.hel0:*",
"n3.hel0:*",
"n4.hel0:*",
]
},
{
@@ -332,14 +334,6 @@ configMaps:
{ "name": "kueue.dev.tos.obx", "type": "A", "value": "10.255.241.99" },
{ "name": "slurm-agent.rossby.oceanbox.io", "type": "A", "value": "172.16.239.222" },
{ "name": "argocd.adm.vtn.obx", "type": "A", "value": "172.16.239.221" },
{ "name": "grafana.adm.vtn.obx", "type": "A", "value": "172.16.239.221" },
{ "name": "prometheus.adm.vtn.obx", "type": "A", "value": "172.16.239.221" },
{ "name": "alertmanager.adm.vtn.obx", "type": "A", "value": "172.16.239.221" },
{ "name": "slurm-agent.adm.vtn.obx", "type": "A", "value": "172.16.239.221" },
{ "name": "kueue.dev.vtn.obx", "type": "A", "value": "172.16.239.221" },
{ "name": "dashboard.ob-ceph.local", "type": "A", "value": "10.255.241.10" },
{ "name": "grafana.ob-ceph.local", "type": "A", "value": "10.255.241.10" },
{ "name": "s3.ob-ceph.local", "type": "A", "value": "10.255.241.10" },
@@ -356,12 +350,6 @@ configMaps:
{ "name": "alertmanager.ceph.tos.obx", "type": "A", "value": "10.255.241.10" },
{ "name": "hubble.ceph.tos.obx", "type": "A", "value": "10.255.241.10" },
{ "name": "dashboard.ceph.vtn.obx", "type": "A", "value": "172.16.239.50" },
{ "name": "grafana.ceph.vtn.obx", "type": "A", "value": "172.16.239.50" },
{ "name": "prometheus.ceph.vtn.obx", "type": "A", "value": "172.16.239.50" },
{ "name": "alertmanager.ceph.vtn.obx", "type": "A", "value": "172.16.239.50" },
{ "name": "hubble.ceph.vtn.obx", "type": "A", "value": "172.16.239.50" },
{ "name": "jonas-atlantis.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" },
{ "name": "jonas-sorcerer.ekman.oceanbox.io", "type": "A", "value": "10.255.241.99" },
{ "name": "stig-atlantis.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" },
@@ -381,4 +369,9 @@ configMaps:
{ "name": "ole-maps.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" },
{ "name": "ole-sorcerer.ekman.oceanbox.io", "type": "A", "value": "10.255.241.99" },
{ "name": "ole-codex.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" }
{ "name": "controlplane-1.hel0.oceanbox.io", "type": "A", "value": "65.109.27.97" },
{ "name": "controlplane-2.hel0.oceanbox.io", "type": "A", "value": "65.21.138.120" },
{ "name": "controlplane-3.hel0.oceanbox.io", "type": "A", "value": "95.217.77.113" },
{ "name": "worker-1.hel0.oceanbox.io", "type": "A", "value": "135.181.77.161" },
]