diff --git a/k8s/infra/vpn/netbird/agent/agent-setup-key.yaml b/k8s/infra/vpn/netbird/agent/agent-setup-key.yaml index 10f925b..ab52596 100644 --- a/k8s/infra/vpn/netbird/agent/agent-setup-key.yaml +++ b/k8s/infra/vpn/netbird/agent/agent-setup-key.yaml @@ -5,7 +5,7 @@ metadata: namespace: netbird spec: encryptedData: - setupKey: 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 + setupKey: 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 template: metadata: name: agent-setup-key diff --git a/k8s/infra/vpn/netbird/agent/daemon-set.yaml b/k8s/infra/vpn/netbird/agent/daemon-set.yaml index 86ca7c3..5b6501d 100644 --- a/k8s/infra/vpn/netbird/agent/daemon-set.yaml +++ b/k8s/infra/vpn/netbird/agent/daemon-set.yaml @@ -12,18 +12,18 @@ spec: labels: app: netbird spec: -# securityContext: -# seccompProfile: -# type: RuntimeDefault + securityContext: + seccompProfile: + type: RuntimeDefault containers: - name: netbird image: docker.io/netbirdio/netbird:0.35.2 # renovate: docker=docker.io/netbirdio/netbird imagePullPolicy: IfNotPresent -# securityContext: -# allowPrivilegeEscalation: false -# readOnlyRootFilesystem: true -# capabilities: -# add: [ NET_ADMIN, PERFMON, BPF ] + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + add: [ NET_ADMIN, PERFMON, BPF ] envFrom: - configMapRef: name: agent-config diff --git a/k8s/infra/vpn/netbird/agent/kustomization.yaml b/k8s/infra/vpn/netbird/agent/kustomization.yaml index 81d05ac..dcbd668 100644 --- a/k8s/infra/vpn/netbird/agent/kustomization.yaml +++ b/k8s/infra/vpn/netbird/agent/kustomization.yaml @@ -5,7 +5,7 @@ configMapGenerator: - name: agent-config namespace: netbird literals: - - NB_HOSTNAME="talos-router" + - NB_HOSTNAME="talos-agent" - NB_LOG_LEVEL="warn" - NB_MANAGEMENT_URL="https://netbird.stonegarden.dev" - NB_ADMIN_URL="https://netbird.stonegarden.dev"