Gitiles
Code Review Sign In
code.v1.dodo.cloud / pcloud / 3c91e8b6b312ae2faaf37e3bd3d0667979d4cb3a / . / scripts / homelab / installer / nodes-infrastructure.yaml
blob: f10392ec59c486758d8e1b730ee1bcf7ecaec8b2 [file] [log] [blame]
giolekva86980ef2021-10-08 19:35:08 +0400[diff] [blame]1apiVersion: lekva.me/v1
2kind: NebulaNode
3metadata:
4 name: rpi111
5 namespace: ingress-nginx-private
6spec:
7 caName: pcloud
8 caNamespace: ingress-nginx-private
9 ipCidr: "111.0.0.111/24"
10 secretName: node-rpi111-cert
11---
12apiVersion: lekva.me/v1
13kind: NebulaNode
14metadata:
15 name: rpi112
16 namespace: ingress-nginx-private
17spec:
18 caName: pcloud
19 caNamespace: ingress-nginx-private
20 ipCidr: "111.0.0.112/24"
21 secretName: node-rpi112-cert
22---
23apiVersion: lekva.me/v1
24kind: NebulaNode
25metadata:
26 name: rpi113
27 namespace: ingress-nginx-private
28spec:
29 caName: pcloud
30 caNamespace: ingress-nginx-private
31 ipCidr: "111.0.0.113/24"
32 secretName: node-rpi113-cert
33---
giolekvac4e512f2021-10-24 10:38:35 +0400[diff] [blame]34apiVersion: lekva.me/v1
35kind: NebulaNode
36metadata:
37 name: rpi114
38 namespace: ingress-nginx-private
39spec:
40 caName: pcloud
41 caNamespace: ingress-nginx-private
42 ipCidr: "111.0.0.114/24"
43 secretName: node-rpi114-cert
44---
giolekva86980ef2021-10-08 19:35:08 +0400[diff] [blame]45apiVersion: apps/v1
46kind: DaemonSet
47metadata:
48 name: lighthouse-rpi111
49 namespace: ingress-nginx-private
50spec:
51 selector:
52 matchLabels:
53 app: lighthouse-rpi111
54 template:
55 metadata:
56 labels:
57 app: lighthouse-rpi111
58 spec:
59 restartPolicy: Always
60 hostNetwork: true
61 volumes:
62 - name: cert
63 secret:
64 secretName: node-rpi111-cert
65 - name: config
66 configMap:
67 name: nodes-lighthouse-config
68 containers:
69 - name: lighthouse
70 image: giolekva/nebula:latest
71 imagePullPolicy: IfNotPresent
72 securityContext:
73 capabilities:
74 add: ["NET_ADMIN"]
75 privileged: true
76 ports:
77 - name: lighthouse
78 containerPort: 4242
79 protocol: UDP
80 command: ["nebula", "--config=/etc/nebula/config/nodes-lighthouse.yaml"]
81 volumeMounts:
82 - name: cert
83 mountPath: /etc/nebula/lighthouse
84 readOnly: true
85 - name: config
86 mountPath: /etc/nebula/config
87 readOnly: true
88 affinity:
89 nodeAffinity:
90 requiredDuringSchedulingIgnoredDuringExecution:
91 nodeSelectorTerms:
92 - matchExpressions:
93 - key: kubernetes.io/hostname
94 operator: In
95 values:
96 - rpi111
97 tolerations:
98 - key: "pcloud"
99 operator: "Equal"
100 value: "role"
101 effect: "NoSchedule"
102---
103apiVersion: apps/v1
104kind: DaemonSet
105metadata:
106 name: lighthouse-rpi112
107 namespace: ingress-nginx-private
108spec:
109 selector:
110 matchLabels:
111 app: lighthouse-rpi112
112 template:
113 metadata:
114 labels:
115 app: lighthouse-rpi112
116 spec:
117 restartPolicy: Always
118 hostNetwork: true
119 volumes:
120 - name: cert
121 secret:
122 secretName: node-rpi112-cert
123 - name: config
124 configMap:
125 name: nodes-lighthouse-config
126 containers:
127 - name: lighthouse
128 image: giolekva/nebula:latest
129 imagePullPolicy: IfNotPresent
130 securityContext:
131 capabilities:
132 add: ["NET_ADMIN"]
133 privileged: true
134 ports:
135 - name: lighthouse
136 containerPort: 4242
137 protocol: UDP
138 command: ["nebula", "--config=/etc/nebula/config/nodes-lighthouse.yaml"]
139 volumeMounts:
140 - name: cert
141 mountPath: /etc/nebula/lighthouse
142 readOnly: true
143 - name: config
144 mountPath: /etc/nebula/config
145 readOnly: true
146 affinity:
147 nodeAffinity:
148 requiredDuringSchedulingIgnoredDuringExecution:
149 nodeSelectorTerms:
150 - matchExpressions:
151 - key: kubernetes.io/hostname
152 operator: In
153 values:
154 - rpi112
155 tolerations:
156 - key: "pcloud"
157 operator: "Equal"
158 value: "role"
159 effect: "NoSchedule"
160---
161apiVersion: apps/v1
162kind: DaemonSet
163metadata:
164 name: lighthouse-rpi113
165 namespace: ingress-nginx-private
166spec:
167 selector:
168 matchLabels:
169 app: lighthouse-rpi113
170 template:
171 metadata:
172 labels:
173 app: lighthouse-rpi113
174 spec:
175 restartPolicy: Always
176 hostNetwork: true
177 volumes:
178 - name: cert
179 secret:
180 secretName: node-rpi113-cert
181 - name: config
182 configMap:
183 name: nodes-lighthouse-config
184 containers:
185 - name: lighthouse
186 image: giolekva/nebula:latest
187 imagePullPolicy: IfNotPresent
188 securityContext:
189 capabilities:
190 add: ["NET_ADMIN"]
191 privileged: true
192 ports:
193 - name: lighthouse
194 containerPort: 4242
195 protocol: UDP
196 command: ["nebula", "--config=/etc/nebula/config/nodes-lighthouse.yaml"]
197 volumeMounts:
198 - name: cert
199 mountPath: /etc/nebula/lighthouse
200 readOnly: true
201 - name: config
202 mountPath: /etc/nebula/config
203 readOnly: true
204 affinity:
205 nodeAffinity:
206 requiredDuringSchedulingIgnoredDuringExecution:
207 nodeSelectorTerms:
208 - matchExpressions:
209 - key: kubernetes.io/hostname
210 operator: In
211 values:
212 - rpi113
213 tolerations:
214 - key: "pcloud"
215 operator: "Equal"
216 value: "role"
217 effect: "NoSchedule"
giolekvac4e512f2021-10-24 10:38:35 +0400[diff] [blame]218---
219apiVersion: apps/v1
220kind: DaemonSet
221metadata:
222 name: lighthouse-rpi114
223 namespace: ingress-nginx-private
224spec:
225 selector:
226 matchLabels:
227 app: lighthouse-rpi114
228 template:
229 metadata:
230 labels:
231 app: lighthouse-rpi114
232 spec:
233 restartPolicy: Always
234 hostNetwork: true
235 volumes:
236 - name: cert
237 secret:
238 secretName: node-rpi114-cert
239 - name: config
240 configMap:
241 name: nodes-lighthouse-config
242 containers:
243 - name: lighthouse
244 image: giolekva/nebula:latest
245 imagePullPolicy: IfNotPresent
246 securityContext:
247 capabilities:
248 add: ["NET_ADMIN"]
249 privileged: true
250 ports:
251 - name: lighthouse
252 containerPort: 4242
253 protocol: UDP
254 command: ["nebula", "--config=/etc/nebula/config/nodes-lighthouse.yaml"]
255 volumeMounts:
256 - name: cert
257 mountPath: /etc/nebula/lighthouse
258 readOnly: true
259 - name: config
260 mountPath: /etc/nebula/config
261 readOnly: true
262 affinity:
263 nodeAffinity:
264 requiredDuringSchedulingIgnoredDuringExecution:
265 nodeSelectorTerms:
266 - matchExpressions:
267 - key: kubernetes.io/hostname
268 operator: In
269 values:
270 - rpi114
271 tolerations:
272 - key: "pcloud"
273 operator: "Equal"
274 value: "role"
275 effect: "NoSchedule"