Files
homelab-v/k8s/infra/vpn/netbird/management/kustomization.yaml
T

49 lines
2.0 KiB
YAML

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
configMapGenerator:
- name: management-config-template
namespace: netbird
files:
# https://github.com/netbirdio/netbird/blob/main/infrastructure_files/management.json.tmpl
- config/management.json.tmpl
- name: management-auth-config
namespace: netbird
literals:
- NETBIRD_AUTH_OIDC_CONFIGURATION_ENDPOINT="https://keycloak.stonegarden.dev/realms/homelab/.well-known/openid-configuration"
- NETBIRD_AUTH_DEVICE_AUTH_PROVIDER="hosted"
- NETBIRD_AUTH_DEVICE_AUTH_AUDIENCE="netbird"
- NETBIRD_AUTH_DEVICE_AUTH_AUTHORITY="https://keycloak.stonegarden.dev/realms/homelab"
- NETBIRD_AUTH_DEVICE_AUTH_CLIENT_ID="netbird"
- NETBIRD_AUTH_DEVICE_AUTH_DEVICE_AUTHORIZATION_ENDPOINT="https://keycloak.stonegarden.dev/realms/homelab/protocol/openid-connect/auth"
- NETBIRD_AUTH_DEVICE_AUTH_TOKEN_ENDPOINT="https://keycloak.stonegarden.dev/realms/homelab/protocol/openid-connect/token"
- NETBIRD_AUTH_DEVICE_AUTH_SCOPE="openid"
- NETBIRD_AUTH_DEVICE_AUTH_USE_ID_TOKEN="false"
- NETBIRD_AUTH_AUDIENCE="netbird"
- NETBIRD_AUTH_CLIENT_ID="netbird"
- NETBIRD_AUTH_PKCE_REDIRECT_URLS='[ "http://localhost:53000" ]'
- NETBIRD_AUTH_SUPPORTED_SCOPES="openid profile email offline_access netbird-api"
- name: management-connection-config
namespace: netbird
literals:
- NETBIRD_RELAY_URI="rels://netbird.stonegarden.dev:443"
- NETBIRD_SIGNAL_URI="netbird.stonegarden.dev:443"
- NETBIRD_SIGNAL_PROTOCOL="https"
- NETBIRD_STUN_URI="stun:coturn.stonegarden.dev:5349"
- NETBIRD_TURN_URI="turn:coturn.stonegarden.dev:5349"
- name: management-runtime-config
namespace: netbird
literals:
- LOG_LEVEL="info"
- DNS_DOMAIN="stonegarden.dev"
- name: management-oidc-key-check-config
namespace: netbird
literals:
- KEY_CHECK_INTERVAL_SECONDS="900"
resources:
- deployment.yaml
- svc.yaml
- pvc.yaml
- coturn-credentials.yaml