Blame - scripts/homelab/installer/nodes-infrastructure.yaml - pcloud

blob: d40eb875840b7f8aa8a3ec59425d290c785473e6 [file] [log] [blame]

giolekva	86980ef	2021-10-08 19:35:08 +0400	[diff] [blame^]	1	apiVersion: lekva.me/v1
				2	kind: NebulaNode
				3	metadata:
				4	name: rpi111
				5	namespace: ingress-nginx-private
				6	spec:
				7	caName: pcloud
				8	caNamespace: ingress-nginx-private
				9	ipCidr: "111.0.0.111/24"
				10	secretName: node-rpi111-cert
				11	---
				12	apiVersion: lekva.me/v1
				13	kind: NebulaNode
				14	metadata:
				15	name: rpi112
				16	namespace: ingress-nginx-private
				17	spec:
				18	caName: pcloud
				19	caNamespace: ingress-nginx-private
				20	ipCidr: "111.0.0.112/24"
				21	secretName: node-rpi112-cert
				22	---
				23	apiVersion: lekva.me/v1
				24	kind: NebulaNode
				25	metadata:
				26	name: rpi113
				27	namespace: ingress-nginx-private
				28	spec:
				29	caName: pcloud
				30	caNamespace: ingress-nginx-private
				31	ipCidr: "111.0.0.113/24"
				32	secretName: node-rpi113-cert
				33	---
				34	apiVersion: apps/v1
				35	kind: DaemonSet
				36	metadata:
				37	name: lighthouse-rpi111
				38	namespace: ingress-nginx-private
				39	spec:
				40	selector:
				41	matchLabels:
				42	app: lighthouse-rpi111
				43	template:
				44	metadata:
				45	labels:
				46	app: lighthouse-rpi111
				47	spec:
				48	restartPolicy: Always
				49	hostNetwork: true
				50	volumes:
				51	- name: cert
				52	secret:
				53	secretName: node-rpi111-cert
				54	- name: config
				55	configMap:
				56	name: nodes-lighthouse-config
				57	containers:
				58	- name: lighthouse
				59	image: giolekva/nebula:latest
				60	imagePullPolicy: IfNotPresent
				61	securityContext:
				62	capabilities:
				63	add: ["NET_ADMIN"]
				64	privileged: true
				65	ports:
				66	- name: lighthouse
				67	containerPort: 4242
				68	protocol: UDP
				69	command: ["nebula", "--config=/etc/nebula/config/nodes-lighthouse.yaml"]
				70	volumeMounts:
				71	- name: cert
				72	mountPath: /etc/nebula/lighthouse
				73	readOnly: true
				74	- name: config
				75	mountPath: /etc/nebula/config
				76	readOnly: true
				77	affinity:
				78	nodeAffinity:
				79	requiredDuringSchedulingIgnoredDuringExecution:
				80	nodeSelectorTerms:
				81	- matchExpressions:
				82	- key: kubernetes.io/hostname
				83	operator: In
				84	values:
				85	- rpi111
				86	tolerations:
				87	- key: "pcloud"
				88	operator: "Equal"
				89	value: "role"
				90	effect: "NoSchedule"
				91	---
				92	apiVersion: apps/v1
				93	kind: DaemonSet
				94	metadata:
				95	name: lighthouse-rpi112
				96	namespace: ingress-nginx-private
				97	spec:
				98	selector:
				99	matchLabels:
				100	app: lighthouse-rpi112
				101	template:
				102	metadata:
				103	labels:
				104	app: lighthouse-rpi112
				105	spec:
				106	restartPolicy: Always
				107	hostNetwork: true
				108	volumes:
				109	- name: cert
				110	secret:
				111	secretName: node-rpi112-cert
				112	- name: config
				113	configMap:
				114	name: nodes-lighthouse-config
				115	containers:
				116	- name: lighthouse
				117	image: giolekva/nebula:latest
				118	imagePullPolicy: IfNotPresent
				119	securityContext:
				120	capabilities:
				121	add: ["NET_ADMIN"]
				122	privileged: true
				123	ports:
				124	- name: lighthouse
				125	containerPort: 4242
				126	protocol: UDP
				127	command: ["nebula", "--config=/etc/nebula/config/nodes-lighthouse.yaml"]
				128	volumeMounts:
				129	- name: cert
				130	mountPath: /etc/nebula/lighthouse
				131	readOnly: true
				132	- name: config
				133	mountPath: /etc/nebula/config
				134	readOnly: true
				135	affinity:
				136	nodeAffinity:
				137	requiredDuringSchedulingIgnoredDuringExecution:
				138	nodeSelectorTerms:
				139	- matchExpressions:
				140	- key: kubernetes.io/hostname
				141	operator: In
				142	values:
				143	- rpi112
				144	tolerations:
				145	- key: "pcloud"
				146	operator: "Equal"
				147	value: "role"
				148	effect: "NoSchedule"
				149	---
				150	apiVersion: apps/v1
				151	kind: DaemonSet
				152	metadata:
				153	name: lighthouse-rpi113
				154	namespace: ingress-nginx-private
				155	spec:
				156	selector:
				157	matchLabels:
				158	app: lighthouse-rpi113
				159	template:
				160	metadata:
				161	labels:
				162	app: lighthouse-rpi113
				163	spec:
				164	restartPolicy: Always
				165	hostNetwork: true
				166	volumes:
				167	- name: cert
				168	secret:
				169	secretName: node-rpi113-cert
				170	- name: config
				171	configMap:
				172	name: nodes-lighthouse-config
				173	containers:
				174	- name: lighthouse
				175	image: giolekva/nebula:latest
				176	imagePullPolicy: IfNotPresent
				177	securityContext:
				178	capabilities:
				179	add: ["NET_ADMIN"]
				180	privileged: true
				181	ports:
				182	- name: lighthouse
				183	containerPort: 4242
				184	protocol: UDP
				185	command: ["nebula", "--config=/etc/nebula/config/nodes-lighthouse.yaml"]
				186	volumeMounts:
				187	- name: cert
				188	mountPath: /etc/nebula/lighthouse
				189	readOnly: true
				190	- name: config
				191	mountPath: /etc/nebula/config
				192	readOnly: true
				193	affinity:
				194	nodeAffinity:
				195	requiredDuringSchedulingIgnoredDuringExecution:
				196	nodeSelectorTerms:
				197	- matchExpressions:
				198	- key: kubernetes.io/hostname
				199	operator: In
				200	values:
				201	- rpi113
				202	tolerations:
				203	- key: "pcloud"
				204	operator: "Equal"
				205	value: "role"
				206	effect: "NoSchedule"