add services

clusters/cl01tl/services/tailscale-operator/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 1.80.0
     repository: https://pkgs.tailscale.com/helmcharts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/tailscale.png
-appVersion: v1.78.3
+appVersion: v1.80.0

clusters/cl01tl/services/tailscale-operator/templates/connector.yaml

@@ -15,3 +15,5 @@ spec:
   subnetRouter:
     advertiseRoutes:
       - 192.168.1.0/24
+      - 10.230.0.0/24
+      - 10.232.0.0/22

clusters/cl01tl/services/tailscale-operator/templates/dns-config.yaml

@@ -13,4 +13,4 @@ spec:
   nameserver:
     image:
       repo: tailscale/k8s-nameserver
-      tag: unstable-v1.79.213
+      tag: unstable-v1.81.44

clusters/cl01tl/services/tailscale-operator/templates/external-secrets.yaml

@@ -18,13 +18,13 @@ spec:
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/tailscale/operator/oauth
+        key: /tailscale/k8s-operator
         metadataPolicy: None
         property: clientId
     - secretKey: client_secret
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/tailscale/operator/oauth
+        key: /tailscale/k8s-operator
         metadataPolicy: None
         property: clientSecret

clusters/standby/services/external-dns/Chart.yaml

@@ -1,22 +0,0 @@
-apiVersion: v2
-name: external-dns
-version: 1.0.0
-description: External DNS
-keywords:
-  - external-dns
-  - dns
-  - unifi
-  - kubernetes
-home: https://wiki.alexlebens.dev/doc/external-dns-Zdhuh9NAT1
-sources:
-  - https://github.com/kubernetes-sigs/external-dns
-  - https://github.com/kubernetes-sigs/external-dns/tree/master/charts/external-dns
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: external-dns
-    alias: external-dns-unifi
-    version: 1.15.1
-    repository: https://kubernetes-sigs.github.io/external-dns/
-icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/kubernetes.png
-appVersion: 1.15.0

clusters/standby/services/external-dns/templates/dns-endpoint.yaml

@@ -1,160 +0,0 @@
-apiVersion: externaldns.k8s.io/v1alpha1
-kind: DNSEndpoint
-metadata:
-  name: external-device-names
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: external-device-names
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: networking
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  endpoints:
-    # Unifi UDM
-    - dnsName: unifi.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.1
-    # Synology Web
-    - dnsName: synology.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.55
-    # Synology Storage
-    - dnsName: synologybond.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.194
-    # HD Homerun
-    - dnsName: hdhr.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.213
-    # Pi KVM
-    - dnsName: pikvm.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.57
-
----
-apiVersion: externaldns.k8s.io/v1alpha1
-kind: DNSEndpoint
-metadata:
-  name: iot-device-names
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: iot-device-names
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: networking
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  endpoints:
-    # Airgradient
-    - dnsName: it01ag.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.100
-    # Phillips Hue
-    - dnsName: it02ph.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.57
-    # TubesZB ZigBee
-    - dnsName: it03tb.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.193
-    # TubesZB Z-Wave
-    - dnsName: it04tb.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.135
-
----
-apiVersion: externaldns.k8s.io/v1alpha1
-kind: DNSEndpoint
-metadata:
-  name: host-names
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: host-names
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: networking
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  endpoints:
-    # Surface Book 3
-    - dnsName: pl01wd.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.86
-    # Synology
-    - dnsName: ps02sn.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.55
-    # Synology Storage
-    - dnsName: ps02sn-bond.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.194
-    # Desktop
-    - dnsName: pd05wd.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.115
-
----
-apiVersion: externaldns.k8s.io/v1alpha1
-kind: DNSEndpoint
-metadata:
-  name: cluster-names
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: cluster-names
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: networking
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  endpoints:
-    # Control
-    - dnsName: cl01tl.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.35
-        - 192.168.1.36
-        - 192.168.1.37
-    # Workers
-    - dnsName: cl01tl-endpoint.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.15
-        - 192.168.1.16
-        - 192.168.1.17
-    # Traefik ps08rp
-    - dnsName: traefik-cl01tl.alexlebens.net
-      recordTTL: 180
-      recordType: A
-      targets:
-        - 192.168.1.15
-        - 192.168.1.16
-        - 192.168.1.17

clusters/standby/services/external-dns/templates/external-secret.yaml

@@ -1,30 +0,0 @@
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: external-dns-unifi-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: external-dns-unifi-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: web
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: username
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /unifi/auth
-        metadataPolicy: None
-        property: user
-    - secretKey: password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /unifi/auth
-        metadataPolicy: None
-        property: password

clusters/standby/services/external-dns/values.yaml

@@ -1,51 +0,0 @@
-external-dns-unifi:
-  fullnameOverride: external-dns-unifi
-  serviceMonitor:
-    enabled: true
-  interval: 1m
-  sources:
-    - ingress
-    - crd
-    - gateway-httproute
-    - gateway-tlsroute
-  policy: sync
-  registry: txt
-  txtOwnerId: default
-  txtPrefix: k8s.
-  domainFilters: ["alexlebens.net"]
-  excludeDomains: []
-  provider:
-    name: webhook
-    webhook:
-      image:
-        repository: ghcr.io/kashalls/external-dns-unifi-webhook
-        tag: v0.4.1
-      env:
-        - name: UNIFI_HOST
-          value: https://192.168.1.1
-        - name: UNIFI_USER
-          valueFrom:
-            secretKeyRef:
-              name: external-dns-unifi-secret
-              key: username
-        - name: UNIFI_PASS
-          valueFrom:
-            secretKeyRef:
-              name: external-dns-unifi-secret
-              key: password
-        - name: LOG_LEVEL
-          value: debug
-      livenessProbe:
-        httpGet:
-          path: /healthz
-          port: http-webhook
-        initialDelaySeconds: 10
-        timeoutSeconds: 5
-      readinessProbe:
-        httpGet:
-          path: /readyz
-          port: http-webhook
-        initialDelaySeconds: 10
-        timeoutSeconds: 5
-  extraArgs:
-    - --ignore-ingress-tls-spec