fix(headscale): Persist router cm

This commit is contained in:
2025-10-23 12:54:31 +02:00
parent 4ac71fd484
commit dc96e78fa7
+17 -3
View File
@@ -101,6 +101,7 @@ configMaps:
"Moritz.Jorg@oceanbox.io", "Moritz.Jorg@oceanbox.io",
"simen.kirkvik@oceanbox.io", "simen.kirkvik@oceanbox.io",
"stig.r.jensen@oceanbox.io", "stig.r.jensen@oceanbox.io",
"system@",
], ],
}, },
"tagOwners": { "tagOwners": {
@@ -127,7 +128,11 @@ configMaps:
"acls": [ "acls": [
{ {
"action": "accept", "action": "accept",
"src": [ "tag:tos-router", "dc.tos.net" ], "src": [
"tag:tos-router",
"dc.tos.net",
"group:admin",
],
"dst": [ "dst": [
"tag:vtn-router:*", "tag:vtn-router:*",
"dc.vtn.net:*", "dc.vtn.net:*",
@@ -135,12 +140,21 @@ configMaps:
}, },
{ {
"action": "accept", "action": "accept",
"src": [ "tag:vtn-router", "dc.vtn.net" ], "src": [
"tag:vtn-router",
"dc.vtn.net",
"group:admin",
],
"dst": [ "dst": [
"tag:tos-router:*", "tag:tos-router:*",
"dc.tos.net:*", "dc.tos.net:*",
] ]
}, },
{
"action": "accept",
"src": [ "group:admin", ],
"dst": [ "*:*", ]
},
] ]
} }
dns: dns:
@@ -156,6 +170,6 @@ configMaps:
{ "name": "alertmanager.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" }, { "name": "alertmanager.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" },
{ "name": "argocd.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" }, { "name": "argocd.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" },
{ "name": "hubble.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" }, { "name": "hubble.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" },
{ "name": "plausible.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" }, { "name": "umami.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" },
{ "name": "dapr.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" } { "name": "dapr.adm.oceanbox.io", "type": "A", "value": "10.255.241.11" }
] ]