| #!/bin/sh |
| |
| # helm upgrade --create-namespace \ |
| # --namespace ingress-nginx \ |
| # nginx ingress-nginx/ingress-nginx \ |
| # --version 4.0.3 \ |
| # --set fullNameOverride=nginx \ |
| # --set controller.service.type=LoadBalancer \ |
| # --set controller.ingressClassByName=true \ |
| # --set controller.ingressClassResource.name=nginx \ |
| # --set controller.ingressClassResource.enabled=true \ |
| # --set controller.ingressClassResource.default=true \ |
| # --set controller.ingressClassResource.controllerValue="k8s.io/ingress-nginx" \ |
| # --set controller.extraArgs.default-ssl-certificate=ingress-nginx/cert-wildcard.lekva.me \ |
| # --set controller.config.proxy-body-size="100M" \ |
| # --set tcp.25="app-maddy/maddy:25" \ |
| # --set tcp.143="app-maddy/maddy:143" \ |
| # --set tcp.993="app-maddy/maddy:993" \ |
| # --set tcp.587="app-maddy/maddy:587" \ |
| # --set tcp.465="app-maddy/maddy:465" |
| # # --set udp.4242="ingress-nginx-private/lighthouse:4242" |
| |
| # kubectl create configmap \ |
| # -n ingress-nginx-private \ |
| # lighthouse-config \ |
| # --from-file ../../core/nebula/lighthouse.yaml |
| kubectl create configmap \ |
| -n ingress-nginx-private \ |
| nodes-lighthouse-config \ |
| --from-file installer/nodes-lighthouse.yaml |
| |
| kubectl apply -f installer/nodes-infrastructure.yaml |
| |
| |
| # kubectl apply -f installer/lighthouse-node.yaml |
| |
| # helm upgrade --create-namespace \ |
| # --namespace ingress-nginx-private \ |
| # nginx ingress-nginx/ingress-nginx \ |
| # --version 4.0.3 \ |
| # --set fullnameOverride=nginx-private \ |
| # --set controller.service.type=ClusterIP \ |
| # --set controller.ingressClassByName=true \ |
| # --set controller.ingressClassResource.name=nginx-private \ |
| # --set controller.ingressClassResource.enabled=true \ |
| # --set controller.ingressClassResource.default=false \ |
| # --set controller.ingressClassResource.controllerValue="k8s.io/ingress-nginx-private" \ |
| # --set controller.extraVolumes[0].name="lighthouse-cert" \ |
| # --set controller.extraVolumes[0].secret.secretName="node-lighthouse-cert" \ |
| # --set controller.extraVolumes[1].name=config \ |
| # --set controller.extraVolumes[1].configMap.name=lighthouse-config \ |
| # --set controller.extraContainers[0].name=lighthouse \ |
| # --set controller.extraContainers[0].image=giolekva/nebula:latest \ |
| # --set controller.extraContainers[0].imagePullPolicy=IfNotPresent \ |
| # --set controller.extraContainers[0].securityContext.capabilities.add[0]=NET_ADMIN \ |
| # --set controller.extraContainers[0].securityContext.privileged=true \ |
| # --set controller.extraContainers[0].ports[0].name=nebula \ |
| # --set controller.extraContainers[0].ports[0].containerPort=4242 \ |
| # --set controller.extraContainers[0].ports[0].protocol=UDP \ |
| # --set controller.extraContainers[0].command[0]="nebula" \ |
| # --set controller.extraContainers[0].command[1]="--config=/etc/nebula/config/lighthouse.yaml" \ |
| # --set controller.extraContainers[0].volumeMounts[0].name=lighthouse-cert \ |
| # --set controller.extraContainers[0].volumeMounts[0].mountPath=/etc/nebula/lighthouse \ |
| # --set controller.extraContainers[0].volumeMounts[1].name=config \ |
| # --set controller.extraContainers[0].volumeMounts[1].mountPath=/etc/nebula/config \ |
| # --set controller.config.bind-address="111.0.0.1" \ |
| # --set controller.config.proxy-body-size="0" \ |
| # --set udp.53="pihole/pihole-dns-udp:53" \ |
| # --set tcp.53="pihole/pihole-dns-tcp:53" |
| |
| # # --set controller.extraVolumes[1].name=ca-cert \ |
| # # --set controller.extraVolumes[1].configMap.name=ca-cert \ |
| |
| # # --set controller.extraContainers[0].volumeMounts[1].name=ca-cert \ |
| # # --set controller.extraContainers[0].volumeMounts[1].mountPath=/etc/nebula/ca \ |
| |
| # kubectl apply -f installer/ingress-nginx-private-lightouse-service.yaml |