Skip to content

Commit 8b1c779

Browse files
committed
fix: re-apply the ingress changes after updating the netbird chart with annotations support
Signed-off-by: Sidharth Jawale <sidharth@obmondo.com>
1 parent d77a386 commit 8b1c779

1 file changed

Lines changed: 67 additions & 1 deletion

File tree

argocd-helm-charts/netbird/values.yaml

Lines changed: 67 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -136,10 +136,53 @@ netbird:
136136
IDP_SERVICE_ACCOUNT_USER: netbird/idpServiceAccountUser
137137
IDP_SERVICE_ACCOUNT_PASSWORD: netbird/idpServiceAccountPassword
138138
DATASTORE_ENCRYPTION_KEY: netbird/datastoreEncryptionKey
139+
useBackwardsGrpcService: true
140+
serviceGrpc:
141+
annotations:
142+
traefik.ingress.kubernetes.io/service.serversscheme: h2c
143+
ingressGrpc:
144+
enabled: true
145+
className: traefik-cert-manager
146+
tls:
147+
- hosts:
148+
- vpn.example.com
149+
secretName: vpn.example.com
150+
hosts:
151+
- host: vpn.example.com
152+
paths:
153+
- path: /management
154+
pathType: ImplementationSpecific
155+
ingress:
156+
enabled: true
157+
className: traefik-cert-manager
158+
tls:
159+
- hosts:
160+
- vpn.example.com
161+
secretName: vpn.example.com
162+
hosts:
163+
- host: vpn.example.com
164+
paths:
165+
- path: /api
166+
pathType: ImplementationSpecific
139167

140168
signal:
141169
image:
142170
tag: 0.55.1
171+
service:
172+
annotations:
173+
traefik.ingress.kubernetes.io/service.serversscheme: h2c
174+
ingress:
175+
enabled: true
176+
className: traefik-cert-manager
177+
tls:
178+
- hosts:
179+
- vpn.example.com
180+
secretName: vpn.example.com
181+
hosts:
182+
- host: vpn.example.com
183+
paths:
184+
- path: /signalexchange
185+
pathType: ImplementationSpecific
143186

144187
relay:
145188
image:
@@ -150,6 +193,18 @@ netbird:
150193
NB_EXPOSED_ADDRESS: rels://vpn.example.com:443/relay
151194
envFromSecret:
152195
NB_AUTH_SECRET: netbird/relayPassword
196+
ingress:
197+
enabled: true
198+
className: traefik-cert-manager
199+
tls:
200+
- hosts:
201+
- vpn.example.com
202+
secretName: vpn.example.com
203+
hosts:
204+
- host: vpn.example.com
205+
paths:
206+
- path: /relay
207+
pathType: ImplementationSpecific
153208

154209
dashboard:
155210
enabled: true
@@ -163,11 +218,22 @@ netbird:
163218
NETBIRD_MGMT_API_ENDPOINT: https://vpn.example.com:443
164219
NETBIRD_MGMT_GRPC_API_ENDPOINT: https://vpn.example.com:443
165220
# OIDC
166-
AUTH_CLIENT_SECRET:
167221
AUTH_AUTHORITY: https://keycloak.example.com/auth/realms/Obmondo
168222
USE_AUTH0: false
169223
AUTH_SUPPORTED_SCOPES: openid profile email offline_access netbird-vpn-api
170224
NETBIRD_TOKEN_SOURCE: accessToken
225+
ingress:
226+
enabled: true
227+
className: traefik-cert-manager
228+
tls:
229+
- hosts:
230+
- vpn.example.com
231+
secretName: vpn.example.com
232+
hosts:
233+
- host: vpn.example.com
234+
paths:
235+
- path: /
236+
pathType: ImplementationSpecific
171237

172238
coturn:
173239
coturn:

0 commit comments

Comments
 (0)