Added RBAC mtproxy
All checks were successful
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 10s
Check with kubeconform / lint (push) Successful in 7s
Auto-update README / Generate README and Create MR (push) Successful in 18s

This commit is contained in:
AB
2026-02-12 01:08:46 +02:00
parent 9d6d564355
commit 6e79042ec8

View File

@@ -44,11 +44,16 @@ spec:
secretKeyRef: secretKeyRef:
name: tgproxy-secret name: tgproxy-secret
key: PORT key: PORT
volumeMounts:
- name: data
mountPath: /data
command: command:
- /bin/bash - /bin/bash
- -c - -c
- | - |
set -e set -e
curl -s https://core.telegram.org/getProxySecret -o /data/proxy-secret
curl -s https://core.telegram.org/getProxyConfig -o /data/proxy-multi.conf
NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace) NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
SERVER=$(kubectl get node "${NODE_NAME}" -o jsonpath='{.metadata.labels.mtproxy}') SERVER=$(kubectl get node "${NODE_NAME}" -o jsonpath='{.metadata.labels.mtproxy}')
if [ -z "${SERVER}" ]; then if [ -z "${SERVER}" ]; then
@@ -78,17 +83,14 @@ spec:
- /bin/sh - /bin/sh
- -c - -c
- >- - >-
cat /etc/*release* && \
# /usr/bin/curl -s https://core.telegram.org/getProxySecret -o proxy-secret && \
# /usr/bin/curl -s https://core.telegram.org/getProxyConfig -o proxy-multi.conf && \
mtproto-proxy mtproto-proxy
-u nobody -u nobody
-p 8888 -p 8888
-H $(PORT) -H $(PORT)
-M 1 -M 1
-S $(SECRET) -S $(SECRET)
--aes-pwd proxy-secret --aes-pwd /data/proxy-secret
proxy-multi.conf /data/proxy-multi.conf
env: env:
- name: SECRET - name: SECRET
valueFrom: valueFrom: