viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add cronjob to monitor prometheus and init correct config for wireguard ui [CI SKIP]

Browse source
This commit is contained in:
viktorbarzin 2021-04-02 23:14:47 +01:00
parent f98cc3a3c1
commit cccc49378e
No known key found for this signature in database
GPG key ID: 0EB088298288D958
4 changed files with 87 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

59
modules/kubernetes/wireguard/main.tf
View file

@ -44,6 +44,8 @@ resource "kubernetes_secret" "wg_0_key" {
}
data = {
"wg0.key" = var.wg_0_key
# If thep rivate key changes the pub key must be updated manually
"wg-ui-config" = format("{\"PrivateKey\": \"%s\",\"PublicKey\": \"%s\",\"Users\": {}}", var.wg_0_key, "3OeDa6Z3Z6vPVxn/WKJujYL7DoDYPPpI5W+2glUYLHU=")
}
type = "generic"
}
@ -217,8 +219,11 @@ resource "kubernetes_deployment" "webui" {
labels = {
app = "webui"
}
# annotations = {
# "configmap.reloader.stakater.com/reload" = "wg0-conf"
# }
annotations = {
"configmap.reloader.stakater.com/reload" = "wg0-conf"
"reloader.stakater.com/search" = "true"
}
}
spec {
@ -235,6 +240,21 @@ resource "kubernetes_deployment" "webui" {
}
}
spec {
init_container {
image = "busybox"
name = "setup-config"
command = ["/bin/sh", "-c", "cat /config/config.json && cp /config/config.json /cache/config.json"]
# command = ["/bin/sh", "-c", "cat /config/config.json /cache/config.json; tail -f /dev/null"]
volume_mount {
name = "config"
mount_path = "/config/config.json"
sub_path = "config.json"
}
volume_mount {
name = "cache"
mount_path = "/cache"
}
}
container {
image = "embarkstudios/wireguard-ui:latest"
name = "webui"
@ -265,8 +285,43 @@ resource "kubernetes_deployment" "webui" {
add = ["NET_ADMIN", "SYS_MODULE", "CAP_SYS_ADMIN"]
}
}
}
# volume_mount {
# name = "wg0-key"
# mount_path = "/data/config.json"
# sub_path = "config.json"
# }
volume_mount {
name = "cache"
mount_path = "/data"
}
# volume_mount {
# name = "wg0-key"
# mount_path = "/etc/wireguard/wg0.key"
# sub_path = "wg0.key"
# }
}
# volume {
# name = "wg0-conf"
# config_map {
# name = "wg0-conf"
# }
# }
volume {
name = "config"
secret {
secret_name = "wg0-key"
items {
key = "wg-ui-config"
path = "config.json"
}
}
}
volume {
name = "cache"
empty_dir {
}
}
}
}
}