mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-21 05:26:49 +00:00
- Ceph v19.2.0 has BlueStore::expand_devices assertion bug that crashes OSD expand-bluefs init containers. v19.2.3 includes fixes. - NetBird operator webhook failurePolicy: Fail blocks all pod creation cluster-wide when webhook service is unreachable. Changed to Ignore. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
47 lines
1009 B
YAML
47 lines
1009 B
YAML
# Netbird Kubernetes Operator
|
|
# Auto-discovers K8s services via annotations and creates Netbird Networks
|
|
# Chart: netbird-operator/kubernetes-operator
|
|
|
|
# API key from ExternalSecret-managed secret
|
|
netbirdAPI:
|
|
keyFromSecret:
|
|
name: netbird-mgmt-api-key
|
|
key: NB_API_KEY
|
|
|
|
# Explicit tag required — Kyverno disallow-latest-tag policy
|
|
routingClientImage: "netbirdio/netbird:0.66.0"
|
|
|
|
cluster:
|
|
name: homelab
|
|
dns: svc.cluster.local
|
|
|
|
# Enable service exposure via annotations (netbird.io/expose=true)
|
|
ingress:
|
|
enabled: true
|
|
namespacedNetworks: true
|
|
allowAutomaticPolicyCreation: true
|
|
|
|
# Webhook TLS via cert-manager (already deployed)
|
|
webhook:
|
|
enableCertManager: true
|
|
failurePolicy: Ignore
|
|
|
|
operator:
|
|
replicaCount: 1
|
|
image:
|
|
pullPolicy: IfNotPresent
|
|
metrics:
|
|
enabled: true
|
|
port: 8080
|
|
resources:
|
|
limits:
|
|
memory: 256Mi
|
|
requests:
|
|
cpu: 25m
|
|
memory: 64Mi
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|