From 02632d06a437d10ae8e5da1e3ee74db7274f13f1 Mon Sep 17 00:00:00 2001 From: Scooby Husky Date: Sun, 15 Mar 2026 16:25:35 -0500 Subject: [PATCH] Fix NetBird service annotations: use netbird.io/expose for operator The operator watches for netbird.io/expose (presence-based), not netbird.io/resource which was from the old Helmfile bootstrap script. Co-Authored-By: Claude Opus 4.6 --- .../apps/namespace-enrollment-job.yaml | 26 +++++++++---------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/infrastructure/istio/manifests/apps/namespace-enrollment-job.yaml b/infrastructure/istio/manifests/apps/namespace-enrollment-job.yaml index b064f3a..7297553 100644 --- a/infrastructure/istio/manifests/apps/namespace-enrollment-job.yaml +++ b/infrastructure/istio/manifests/apps/namespace-enrollment-job.yaml @@ -39,17 +39,17 @@ spec: kubectl label namespace "$ns" istio.io/use-waypoint=waypoint --overwrite 2>/dev/null || true done - # Annotate services for NetBird VPN resource auto-discovery - echo "Annotating services for NetBird VPN resource discovery..." - kubectl annotate svc -n gitlab gitlab-webservice-default netbird.io/resource="true" --overwrite 2>/dev/null || true - kubectl annotate svc -n grafana grafana netbird.io/resource="true" --overwrite 2>/dev/null || true - kubectl annotate svc -n home-assistant home-assistant netbird.io/resource="true" --overwrite 2>/dev/null || true - kubectl annotate svc -n guacamole guacamole netbird.io/resource="true" --overwrite 2>/dev/null || true - kubectl annotate svc -n nextcloud nextcloud netbird.io/resource="true" --overwrite 2>/dev/null || true - kubectl annotate svc -n argocd argocd-server netbird.io/resource="true" --overwrite 2>/dev/null || true - kubectl annotate svc -n frigate frigate netbird.io/resource="true" --overwrite 2>/dev/null || true - kubectl annotate svc -n teslamate teslamate netbird.io/resource="true" --overwrite 2>/dev/null || true - kubectl annotate svc -n home-assistant esphome netbird.io/resource="true" --overwrite 2>/dev/null || true - kubectl annotate svc -n prometheus kube-prometheus-stack-prometheus netbird.io/resource="true" --overwrite 2>/dev/null || true - kubectl annotate svc -n vault vault netbird.io/resource="true" --overwrite 2>/dev/null || true + # Annotate services for NetBird operator auto-discovery (netbird.io/expose triggers the operator) + echo "Annotating services for NetBird operator exposure..." + kubectl annotate svc -n gitlab gitlab-webservice-default netbird.io/expose="true" --overwrite 2>/dev/null || true + kubectl annotate svc -n grafana grafana netbird.io/expose="true" --overwrite 2>/dev/null || true + kubectl annotate svc -n home-assistant home-assistant netbird.io/expose="true" --overwrite 2>/dev/null || true + kubectl annotate svc -n guacamole guacamole netbird.io/expose="true" --overwrite 2>/dev/null || true + kubectl annotate svc -n nextcloud nextcloud netbird.io/expose="true" --overwrite 2>/dev/null || true + kubectl annotate svc -n argocd argocd-server netbird.io/expose="true" --overwrite 2>/dev/null || true + kubectl annotate svc -n frigate frigate netbird.io/expose="true" --overwrite 2>/dev/null || true + kubectl annotate svc -n teslamate teslamate netbird.io/expose="true" --overwrite 2>/dev/null || true + kubectl annotate svc -n home-assistant esphome netbird.io/expose="true" --overwrite 2>/dev/null || true + kubectl annotate svc -n prometheus kube-prometheus-stack-prometheus netbird.io/expose="true" --overwrite 2>/dev/null || true + kubectl annotate svc -n vault vault netbird.io/expose="true" --overwrite 2>/dev/null || true echo "App namespace enrollment and NetBird annotations complete"