Files
homelab-v/k8s/infra/vpn/netbird/relay/deployment.yaml
T
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
be9b1ac24e chore(deps): renovate 2025-06-08
chore(deps): update media containers

chore(deps): update netbird

chore(deps): update netbird

chore(deps): update dependency cert-manager/cert-manager to v1.17.2

chore(deps): update helm release authelia to v0.10.11

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.62

chore(deps): update helm release node-feature-discovery to v0.17.3

chore(deps): update helm release argo-cd to v7.9.1

chore(deps): update cilium to v1.17.4

chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.4

chore(deps): update helm release argo-cd to v8

chore(deps): update helm release cloudnative-pg to v0.24.0

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v73

chore(deps): update ghcr.io/home-operations/qbittorrent docker tag to v5.1.0

chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.24.0

chore(deps): update cloudflare/cloudflared docker tag to v2025.5.0

chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.4.1

chore(deps): update proxmox-csi-plugin docker tag to v0.3.7

chore(deps): update sealed-secrets docker tag to v2.5.13

chore(deps): update intel device plugins to v0.32.1

chore(deps): update terraform talos to v0.8.1 (#324)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform kubernetes to v2.37.1 (#322)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform proxmox to v0.78.1 (#323)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-08 22:23:30 +02:00

44 lines
1.1 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: relay
namespace: netbird
spec:
selector:
matchLabels:
app.kubernetes.io/name: relay
template:
metadata:
labels:
app.kubernetes.io/name: relay
spec:
securityContext:
seccompProfile:
type: RuntimeDefault
containers:
- image: docker.io/netbirdio/relay:0.46.0 # renovate: docker=docker.io/netbirdio/relay
imagePullPolicy: IfNotPresent
name: relay
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
runAsNonRoot: false
capabilities:
drop: [ ALL ]
add: [ NET_ADMIN, NET_RAW, PERFMON, BPF ]
envFrom:
- configMapRef:
name: relay-config
- secretRef:
name: relay-secret
ports:
- containerPort: 80
name: relay
protocol: TCP
resources:
requests:
memory: 16Mi
cpu: 10m
limits:
memory: 64Mi
cpu: 4000m