Compare commits
1 Commits
auto-updat
...
auto-updat
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
bcdf674963 |
@@ -8,8 +8,6 @@ resources:
|
|||||||
- ./telemt-daemonset.yaml
|
- ./telemt-daemonset.yaml
|
||||||
- ./external-secrets.yaml
|
- ./external-secrets.yaml
|
||||||
- ./telemt-external-secrets.yaml
|
- ./telemt-external-secrets.yaml
|
||||||
- ./telemt-service.yaml
|
|
||||||
- ./telemt-servicemonitor.yaml
|
|
||||||
- ./service.yaml
|
- ./service.yaml
|
||||||
- ./secret-reader.yaml
|
- ./secret-reader.yaml
|
||||||
# - ./storage.yaml
|
# - ./storage.yaml
|
||||||
|
|||||||
@@ -55,9 +55,10 @@ spec:
|
|||||||
echo "ERROR: node ${NODE_NAME} has no mtproxy label"
|
echo "ERROR: node ${NODE_NAME} has no mtproxy label"
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
# Build ee-prefixed secret for secure mode
|
# Build dd-prefixed secret for TLS mode: dd + secret + hex(tls_domain)
|
||||||
EE_SECRET="ee${SECRET}"
|
DOMAIN_HEX=$(echo -n 'ya.ru' | xxd -p | tr -d '\n')
|
||||||
LINK="tg://proxy?server=${SERVER}&port=${TELEMT_PORT}&secret=${EE_SECRET}"
|
DD_SECRET="dd${SECRET}${DOMAIN_HEX}"
|
||||||
|
LINK="tg://proxy?server=${SERVER}&port=${TELEMT_PORT}&secret=${DD_SECRET}"
|
||||||
echo "Registering telemt: ${SERVER} -> ${LINK}"
|
echo "Registering telemt: ${SERVER} -> ${LINK}"
|
||||||
if kubectl get secret telemt-links -n "${NAMESPACE}" &>/dev/null; then
|
if kubectl get secret telemt-links -n "${NAMESPACE}" &>/dev/null; then
|
||||||
kubectl patch secret telemt-links -n "${NAMESPACE}" \
|
kubectl patch secret telemt-links -n "${NAMESPACE}" \
|
||||||
@@ -89,8 +90,6 @@ spec:
|
|||||||
mountPath: /run/telemt/config.toml
|
mountPath: /run/telemt/config.toml
|
||||||
subPath: config.toml
|
subPath: config.toml
|
||||||
readOnly: true
|
readOnly: true
|
||||||
- name: etcdir
|
|
||||||
mountPath: /etc/telemt
|
|
||||||
securityContext:
|
securityContext:
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
@@ -108,7 +107,3 @@ spec:
|
|||||||
emptyDir:
|
emptyDir:
|
||||||
medium: Memory
|
medium: Memory
|
||||||
sizeLimit: 1Mi
|
sizeLimit: 1Mi
|
||||||
- name: etcdir
|
|
||||||
emptyDir:
|
|
||||||
medium: Memory
|
|
||||||
sizeLimit: 1Mi
|
|
||||||
|
|||||||
@@ -29,8 +29,6 @@ spec:
|
|||||||
|
|
||||||
[server]
|
[server]
|
||||||
port = 30444
|
port = 30444
|
||||||
metrics_port = 9090
|
|
||||||
metrics_whitelist = ["0.0.0.0/0"]
|
|
||||||
|
|
||||||
[server.api]
|
[server.api]
|
||||||
enabled = true
|
enabled = true
|
||||||
|
|||||||
@@ -1,17 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: telemt-metrics
|
|
||||||
labels:
|
|
||||||
app: telemt
|
|
||||||
spec:
|
|
||||||
type: ClusterIP
|
|
||||||
clusterIP: None
|
|
||||||
selector:
|
|
||||||
app: telemt
|
|
||||||
ports:
|
|
||||||
- port: 9090
|
|
||||||
targetPort: 9090
|
|
||||||
protocol: TCP
|
|
||||||
name: metrics
|
|
||||||
@@ -1,21 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: monitoring.coreos.com/v1
|
|
||||||
kind: ServiceMonitor
|
|
||||||
metadata:
|
|
||||||
name: telemt-metrics
|
|
||||||
labels:
|
|
||||||
app: telemt
|
|
||||||
release: prometheus
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: telemt
|
|
||||||
endpoints:
|
|
||||||
- port: metrics
|
|
||||||
path: /metrics
|
|
||||||
interval: 30s
|
|
||||||
scrapeTimeout: 10s
|
|
||||||
honorLabels: true
|
|
||||||
namespaceSelector:
|
|
||||||
matchNames:
|
|
||||||
- mtproxy
|
|
||||||
Reference in New Issue
Block a user