kacerrandClaude Opus 5
43d429aef7
The default manager config gains a kvm-home provider reaching beelink over Tailscale, the provider sample names the same host, and the manager kustomization uses the locally built kvm-dev image. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
55 lines
2.8 KiB
YAML
55 lines
2.8 KiB
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: providers-config
|
|
namespace: system
|
|
labels:
|
|
app.kubernetes.io/name: egress-proxies-operator
|
|
app.kubernetes.io/managed-by: kustomize
|
|
data:
|
|
# Mounted at /etc/proxy-operator/providers.yaml (--providers-config).
|
|
# The default ships only the kubernetes-pod provider so the operator runs
|
|
# out of the box; add gcp entries (type: gcp, gcp.project: ...) or kvm
|
|
# entries (type: kvm, hosts reached over SSH) for real egress fleets —
|
|
# see config/samples/providers-config.yaml.
|
|
providers.yaml: |
|
|
providers:
|
|
- name: kubernetes
|
|
type: kubernetes
|
|
- name: kvm-home
|
|
type: kvm
|
|
kvm:
|
|
# SSH to each host with the libvirt unix socket forwarded through the
|
|
# connection; nothing to open on the hypervisors beyond sshd. Both
|
|
# files come from the optional kvm-ssh Secret mounted by
|
|
# config/manager/manager.yaml — see docs/kvm-provider.md.
|
|
sshKeyFile: /etc/proxy-operator/kvm/id_ed25519
|
|
knownHostsFile: /etc/proxy-operator/kvm/known_hosts
|
|
# insecureIgnoreHostKey: true # skip host-key checks (not recommended)
|
|
# diskSizeGb: 10 # per-VM overlay; cloud-init grows the root fs into it
|
|
# vendorData: | # extra vendor-data; the qemu-guest-agent bootstrap is merged
|
|
# #cloud-config # into each Proxy's cloud-config, not configured here
|
|
# ...
|
|
images:
|
|
# placement.image names a key here (or is an https:// URL directly).
|
|
# Fetched into each host's pool on first use and cached there as
|
|
# base-<key>.qcow2; do not change an entry while Proxies use it.
|
|
debian-13:
|
|
url: https://cloud.debian.org/images/cloud/trixie/latest/debian-13-generic-amd64.qcow2
|
|
# sha256: "<64 hex>" # optional; verified after download
|
|
# firmware: uefi # default; "bios" only for images with no EFI partition
|
|
# # (Debian 13 hangs in GRUB under BIOS headless: Debian bug #1111240)
|
|
ubuntu-24.04:
|
|
url: https://cloud-images.ubuntu.com/noble/current/noble-server-cloudimg-amd64.img
|
|
machineTypes: # placement.machineType names a key here
|
|
small: {vcpus: 1, memoryMiB: 1024}
|
|
medium: {vcpus: 2, memoryMiB: 2048}
|
|
hosts: # placement.zone names a host; optional with one host
|
|
- name: beelink
|
|
address: beelink.tail8c69c.ts.net:22
|
|
user: novakj # must be in the libvirt group
|
|
bridge: br0 # to a LAN with DHCP; the VM's IP comes from there
|
|
# socket: /var/run/libvirt/libvirt-sock
|
|
# pool: default
|
|
|