Compare commits
3 Commits
aa5d05fc58
...
b9cc536cef
| Author | SHA1 | Date | |
|---|---|---|---|
|
b9cc536cef
|
|||
| 0b877a1a8a | |||
| 50fc9b4c57 |
@@ -124,7 +124,7 @@ blocky:
|
||||
home IN CNAME traefik-cl01tl
|
||||
home-assistant IN CNAME traefik-cl01tl
|
||||
home-assistant-code-server IN CNAME traefik-cl01tl
|
||||
hubble IN CNAME cilium-cl01tl
|
||||
hubble IN CNAME traefik-cl01tl
|
||||
huntarr IN CNAME traefik-cl01tl
|
||||
immich IN CNAME traefik-cl01tl
|
||||
jellyfin IN CNAME traefik-cl01tl
|
||||
|
||||
@@ -1,18 +1,18 @@
|
||||
apiVersion: "cilium.io/v2alpha1"
|
||||
kind: CiliumL2AnnouncementPolicy
|
||||
metadata:
|
||||
name: node-gateway-l2-policy
|
||||
namespace: {{ .Release.Namespace }}
|
||||
labels:
|
||||
app.kubernetes.io/name: node-gateway-l2-policy
|
||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||
spec:
|
||||
nodeSelector:
|
||||
matchLabels:
|
||||
kubernetes.io/hostname: talos-ix7-xku
|
||||
interfaces:
|
||||
- end0
|
||||
- enp6s0
|
||||
externalIPs: true
|
||||
loadBalancerIPs: true
|
||||
# apiVersion: "cilium.io/v2alpha1"
|
||||
# kind: CiliumL2AnnouncementPolicy
|
||||
# metadata:
|
||||
# name: node-gateway-l2-policy
|
||||
# namespace: {{ .Release.Namespace }}
|
||||
# labels:
|
||||
# app.kubernetes.io/name: node-gateway-l2-policy
|
||||
# app.kubernetes.io/instance: {{ .Release.Name }}
|
||||
# app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||
# spec:
|
||||
# nodeSelector:
|
||||
# matchLabels:
|
||||
# kubernetes.io/hostname: talos-ix7-xku
|
||||
# interfaces:
|
||||
# - end0
|
||||
# - enp6s0
|
||||
# externalIPs: true
|
||||
# loadBalancerIPs: true
|
||||
|
||||
@@ -1,46 +1,46 @@
|
||||
apiVersion: gateway.networking.k8s.io/v1
|
||||
kind: Gateway
|
||||
metadata:
|
||||
name: cilium-tls-gateway
|
||||
namespace: {{ .Release.Namespace }}
|
||||
labels:
|
||||
app.kubernetes.io/name: cilium-tls-gateway
|
||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: letsencrypt-issuer
|
||||
io.cilium/lb-ipam-ips: "10.232.1.23"
|
||||
spec:
|
||||
addresses:
|
||||
- type: IPAddress
|
||||
value: 10.232.1.23
|
||||
gatewayClassName: cilium
|
||||
listeners:
|
||||
- allowedRoutes:
|
||||
namespaces:
|
||||
from: All
|
||||
hostname: '*.alexlebens.net'
|
||||
name: https
|
||||
port: 443
|
||||
protocol: HTTPS
|
||||
tls:
|
||||
certificateRefs:
|
||||
- group: ''
|
||||
kind: Secret
|
||||
name: https-gateway-cert
|
||||
namespace: kube-system
|
||||
mode: Terminate
|
||||
- allowedRoutes:
|
||||
namespaces:
|
||||
from: All
|
||||
hostname: 'alexlebens.net'
|
||||
name: https-domain
|
||||
port: 443
|
||||
protocol: HTTPS
|
||||
tls:
|
||||
certificateRefs:
|
||||
- group: ''
|
||||
kind: Secret
|
||||
name: https-gateway-cert
|
||||
namespace: kube-system
|
||||
mode: Terminate
|
||||
# apiVersion: gateway.networking.k8s.io/v1
|
||||
# kind: Gateway
|
||||
# metadata:
|
||||
# name: cilium-tls-gateway
|
||||
# namespace: {{ .Release.Namespace }}
|
||||
# labels:
|
||||
# app.kubernetes.io/name: cilium-tls-gateway
|
||||
# app.kubernetes.io/instance: {{ .Release.Name }}
|
||||
# app.kubernetes.io/part-of: {{ .Release.Name }}
|
||||
# annotations:
|
||||
# cert-manager.io/cluster-issuer: letsencrypt-issuer
|
||||
# io.cilium/lb-ipam-ips: "10.232.1.23"
|
||||
# spec:
|
||||
# addresses:
|
||||
# - type: IPAddress
|
||||
# value: 10.232.1.23
|
||||
# gatewayClassName: cilium
|
||||
# listeners:
|
||||
# - allowedRoutes:
|
||||
# namespaces:
|
||||
# from: All
|
||||
# hostname: '*.alexlebens.net'
|
||||
# name: https
|
||||
# port: 443
|
||||
# protocol: HTTPS
|
||||
# tls:
|
||||
# certificateRefs:
|
||||
# - group: ''
|
||||
# kind: Secret
|
||||
# name: https-gateway-cert
|
||||
# namespace: kube-system
|
||||
# mode: Terminate
|
||||
# - allowedRoutes:
|
||||
# namespaces:
|
||||
# from: All
|
||||
# hostname: 'alexlebens.net'
|
||||
# name: https-domain
|
||||
# port: 443
|
||||
# protocol: HTTPS
|
||||
# tls:
|
||||
# certificateRefs:
|
||||
# - group: ''
|
||||
# kind: Secret
|
||||
# name: https-gateway-cert
|
||||
# namespace: kube-system
|
||||
# mode: Terminate
|
||||
|
||||
@@ -11,8 +11,8 @@ spec:
|
||||
parentRefs:
|
||||
- group: gateway.networking.k8s.io
|
||||
kind: Gateway
|
||||
name: cilium-tls-gateway
|
||||
namespace: kube-system
|
||||
name: traefik-gateway
|
||||
namespace: traefik
|
||||
hostnames:
|
||||
- hubble.alexlebens.net
|
||||
rules:
|
||||
|
||||
@@ -26,7 +26,7 @@ cilium:
|
||||
- SYS_ADMIN
|
||||
- SYS_RESOURCE
|
||||
l2announcements:
|
||||
enabled: true
|
||||
enabled: false
|
||||
bgpControlPlane:
|
||||
enabled: false
|
||||
secretsNamespace:
|
||||
|
||||
@@ -1,9 +1,9 @@
|
||||
dependencies:
|
||||
- name: loki
|
||||
repository: https://grafana.github.io/helm-charts
|
||||
version: 6.51.0
|
||||
version: 6.52.0
|
||||
- name: alloy
|
||||
repository: https://grafana.github.io/helm-charts
|
||||
version: 1.5.3
|
||||
digest: sha256:88c8067aa21d8dd0e994e9ab7ff39eed17bdd993eea853721fd42aedb4bec400
|
||||
generated: "2026-02-02T17:28:04.623156-06:00"
|
||||
digest: sha256:00eded04cb4b364633fe922cef88cd07aa2508336f0f07890990d00c5d985c4e
|
||||
generated: "2026-02-05T20:44:56.218205891Z"
|
||||
|
||||
@@ -16,7 +16,7 @@ maintainers:
|
||||
- name: alexlebens
|
||||
dependencies:
|
||||
- name: loki
|
||||
version: 6.51.0
|
||||
version: 6.52.0
|
||||
repository: https://grafana.github.io/helm-charts
|
||||
- name: alloy
|
||||
version: 1.5.3
|
||||
|
||||
@@ -99,7 +99,7 @@ customDNS:
|
||||
home IN CNAME traefik-cl01tl
|
||||
home-assistant IN CNAME traefik-cl01tl
|
||||
home-assistant-code-server IN CNAME traefik-cl01tl
|
||||
hubble IN CNAME cilium-cl01tl
|
||||
hubble IN CNAME traefik-cl01tl
|
||||
huntarr IN CNAME traefik-cl01tl
|
||||
immich IN CNAME traefik-cl01tl
|
||||
jellyfin IN CNAME traefik-cl01tl
|
||||
|
||||
@@ -120,7 +120,7 @@ customDNS:
|
||||
home IN CNAME traefik-cl01tl
|
||||
home-assistant IN CNAME traefik-cl01tl
|
||||
home-assistant-code-server IN CNAME traefik-cl01tl
|
||||
hubble IN CNAME cilium-cl01tl
|
||||
hubble IN CNAME traefik-cl01tl
|
||||
huntarr IN CNAME traefik-cl01tl
|
||||
immich IN CNAME traefik-cl01tl
|
||||
jellyfin IN CNAME traefik-cl01tl
|
||||
|
||||
Reference in New Issue
Block a user