Added config reload

2026-06-29 21:00:55 +03:00
parent 67104123a5
commit f8c69c2434
2 changed files with 96 additions and 9 deletions
@@ -78,6 +78,26 @@ spec:
                kubectl create secret generic amneziawg-endpoints -n "${NAMESPACE}" \
                  --from-literal="${NODE_NAME}=${VALUE}"
              fi
+        - name: sync-client-secret
+          image: bitnami/kubectl:latest
+          imagePullPolicy: IfNotPresent
+          command:
+            - /bin/bash
+            - /scripts/client-secret-sync.sh
+            - once
+          resources:
+            requests:
+              memory: "32Mi"
+              cpu: "10m"
+            limits:
+              memory: "128Mi"
+              cpu: "100m"
+          volumeMounts:
+            - name: scripts
+              mountPath: /scripts
+              readOnly: true
+            - name: runtime-config
+              mountPath: /run/amnezia
      containers:
        - name: amneziawg
          image: amneziavpn/amneziawg-go:latest
@@ -126,9 +146,6 @@ spec:
            - name: server-config
              mountPath: /etc/amnezia/server
              readOnly: true
-            - name: client-config
-              mountPath: /etc/amnezia/clients
-              readOnly: true
            - name: scripts
              mountPath: /scripts
              readOnly: true
@@ -160,6 +177,25 @@ spec:
              readOnly: true
            - name: runtime-config
              mountPath: /run/amnezia
+        - name: client-secret-sync
+          image: bitnami/kubectl:latest
+          imagePullPolicy: IfNotPresent
+          command:
+            - /bin/bash
+            - /scripts/client-secret-sync.sh
+          resources:
+            requests:
+              memory: "32Mi"
+              cpu: "10m"
+            limits:
+              memory: "128Mi"
+              cpu: "100m"
+          volumeMounts:
+            - name: scripts
+              mountPath: /scripts
+              readOnly: true
+            - name: runtime-config
+              mountPath: /run/amnezia
        - name: amneziawg-exporter-redis
          image: redis:alpine
          imagePullPolicy: IfNotPresent
@@ -219,11 +255,6 @@ spec:
            items:
              - key: awg0.conf
                path: awg0.conf
-        - name: client-config
-          secret:
-            secretName: amneziawg-clients
-            optional: true
-            defaultMode: 0600
        - name: scripts
          configMap:
            name: amneziawg-scripts