fix(headscale): Persist router cm

2025-10-23 12:54:31 +02:00
parent 4ac71fd484
commit dc96e78fa7
1 changed files with 17 additions and 3 deletions
@@ -101,6 +101,7 @@ configMaps:
              "Moritz.Jorg@oceanbox.io",
              "simen.kirkvik@oceanbox.io",
              "stig.r.jensen@oceanbox.io",
+              "system@",
            ],
          },
          "tagOwners": {
@@ -127,7 +128,11 @@ configMaps:
          "acls": [
              {
                "action": "accept",
-                "src": [ "tag:tos-router", "dc.tos.net" ],
+                "src": [
+                  "tag:tos-router",
+                  "dc.tos.net",
+                  "group:admin",
+                ],
                "dst": [
                   "tag:vtn-router:*",
                   "dc.vtn.net:*",
@@ -135,12 +140,21 @@ configMaps:
              },
              {
                "action": "accept",
-                "src": [ "tag:vtn-router", "dc.vtn.net" ],
+                "src": [
+                  "tag:vtn-router",
+                  "dc.vtn.net",
+                  "group:admin",
+                ],
                "dst": [
                   "tag:tos-router:*",
                   "dc.tos.net:*",
                ]
              },
+              {
+                "action": "accept",
+                "src": [ "group:admin", ],
+                "dst": [ "*:*", ]
+              },
          ]
        }
  dns:
@@ -156,6 +170,6 @@ configMaps:
           { "name": "alertmanager.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" },
           { "name": "argocd.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" },
           { "name": "hubble.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" },
-           { "name": "plausible.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" },
+           { "name": "umami.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" },
           { "name": "dapr.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" }
        ]