will.anderson/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Switch worker base to custom WireGuard provider for US-IL#267

Browse Source
This commit is contained in:
Will Anderson
2026-04-14 20:31:03 -05:00
parent 7893fdc1d3
commit fcff5f62e5
3 changed files with 11 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/legion/k8s/fornax/worker/base/deployment.yaml
+11 -8
View File
@@ -63,7 +63,7 @@ spec:
- NET_ADMIN - NET_ADMIN
env: env:
- name: VPN_SERVICE_PROVIDER - name: VPN_SERVICE_PROVIDER
value: protonvpn value: custom
- name: VPN_TYPE - name: VPN_TYPE
value: wireguard value: wireguard
- name: WIREGUARD_PRIVATE_KEY - name: WIREGUARD_PRIVATE_KEY
@@ -71,13 +71,16 @@ spec:
secretKeyRef: secretKeyRef:
name: fornax-worker-WORKER_ID-secrets name: fornax-worker-WORKER_ID-secrets
key: PROTONVPN_PRIVATE_KEY key: PROTONVPN_PRIVATE_KEY
- name: SERVER_NAMES - name: WIREGUARD_PUBLIC_KEY
valueFrom: value: qT0lxDVbWEIyrL2A40FfCXRlUALvnryRz2aQdD6gUDs=
secretKeyRef: - name: WIREGUARD_ENDPOINT_IP
name: fornax-worker-WORKER_ID-secrets value: 89.187.180.40
key: PROTONVPN_SERVER - name: WIREGUARD_ENDPOINT_PORT
- name: VPN_PORT_FORWARDING value: "51820"
value: "on" - name: WIREGUARD_ADDRESSES
value: 10.2.0.2/32
- name: WIREGUARD_PERSISTENT_KEEPALIVE_INTERVAL
value: 25s
- name: FIREWALL_OUTBOUND_SUBNETS - name: FIREWALL_OUTBOUND_SUBNETS
value: 10.42.0.0/16,10.43.0.0/16 value: 10.42.0.0/16,10.43.0.0/16
ports: ports:
servers/legion/k8s/fornax/worker/overlays/worker-tx253/kustomization.yaml
-3
View File
@@ -23,9 +23,6 @@ patches:
- op: replace - op: replace
path: /spec/template/spec/containers/0/env/2/valueFrom/secretKeyRef/name path: /spec/template/spec/containers/0/env/2/valueFrom/secretKeyRef/name
value: fornax-worker-tx253-secrets value: fornax-worker-tx253-secrets
- op: replace
path: /spec/template/spec/containers/0/env/3/valueFrom/secretKeyRef/name
value: fornax-worker-tx253-secrets
- op: replace - op: replace
path: /spec/template/spec/containers/1/env/1/value path: /spec/template/spec/containers/1/env/1/value
value: tx253 value: tx253
servers/legion/k8s/fornax/worker/overlays/worker-tx34/kustomization.yaml
-3
View File
@@ -23,9 +23,6 @@ patches:
- op: replace - op: replace
path: /spec/template/spec/containers/0/env/2/valueFrom/secretKeyRef/name path: /spec/template/spec/containers/0/env/2/valueFrom/secretKeyRef/name
value: fornax-worker-tx34-secrets value: fornax-worker-tx34-secrets
- op: replace
path: /spec/template/spec/containers/0/env/3/valueFrom/secretKeyRef/name
value: fornax-worker-tx34-secrets
- op: replace - op: replace
path: /spec/template/spec/containers/1/env/1/value path: /spec/template/spec/containers/1/env/1/value
value: tx34 value: tx34