From c440b928fb84bee0057777b6cb5398ffcdb4da7a Mon Sep 17 00:00:00 2001
From: Jonas Juselius <jonas.juselius@oceanbox.io>
Date: Mon, 27 Apr 2026 14:53:05 +0200
Subject: [PATCH] Add ceph 100gbe net to headscale acl

---
 values/headscale/values/values.yaml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/values/headscale/values/values.yaml b/values/headscale/values/values.yaml
index 1403c75e..d54c638b 100644
--- a/values/headscale/values/values.yaml
+++ b/values/headscale/values/values.yaml
@@ -130,6 +130,10 @@ configMaps:
             "group:intern": [
               "haavahak@stud.ntnu.no",
             ],
+            "group:ceph": [
+              "jonas.juselius@oceanbox.io",
+              "Moritz.Jorg@oceanbox.io",
+            ],
           },
           // tagOwners in tailscale is an association between a TAG and the people allowed to set this TAG on a server.
           // This is documented [here](https://tailscale.com/kb/1068/acl-tags#defining-a-tag)
@@ -232,6 +236,15 @@ configMaps:
                  "tag:hpc:22,80,443",
               ]
             },
+            {
+              "action": "accept",
+              "src": [
+                 "group:ceph",
+              ],
+              "dst": [
+                 "gbe100.tos.net:*",
+              ]
+            },
             {
               "action": "accept",
               "src": [ "*" ],