Files
truecharts/charts/incubator/tailscale/questions.yaml
T
Stavros KoisandGitHub 32a47b60af feat(tailscale): add tailscale (#3488)
* feat(tailscale): add tailscale

* env

* see logs without env

* try something

* render configmap and adjust script

* perms

* call it differently

* mount tmp

* in ram

* disable temp

* change pers path

* sysmod cap

* no messaeg

* fsgrp 0

* puid0

* hostnet

* service

* priv?

* use the included script

* common

* secret

* try with sa and rbac

* secretname

* render sercet

* excelent copy paster

* set tskubesec

* disable probes and remove portal

* without sys_mod

* empty space

* add configmap

* render

* copy paste specialist

* lowercase

* hmm

* different

* again

* and try again

* again

* uhm

* quote?

* wth

* enc secret

* enable tty

* mm

* remove configmap for now

* reenable configmap

* I'M STUPIDDDD

* enable config map

* conditionally add tun

* conditionaly add caps aswell

* update desc

* now test unprevileged

* rootless

* try nonuser-space + rootless

* add docs and remove env (its defined in configmap already)

* Update charts/incubator/tailscale/values.yaml

* Update charts/incubator/tailscale/values.yaml

* Update charts/incubator/tailscale/templates/_configmap.tpl

* add sock5 and descriptions
2022-08-17 19:55:10 +00:00

165 lines
5.3 KiB
YAML

# Include{groups}
portals: {}
questions:
# Include{global}
# Include{controller}
# Include{controllerDeployment}
# Include{replicas}
# Include{replica1}
# Include{strategy}
# Include{recreate}
# Include{controllerExpert}
# Include{controllerExpertExtraArgs}
- variable: tailscale
group: "Container Configuration"
label: "Tailscale Configuration"
schema:
additional_attrs: true
type: dict
attrs:
- variable: authkey
label: "Auth Key"
description: "Provide an auth key to automatically authenticate the node as your user account."
schema:
type: string
private: true
default: ""
- variable: userspace
label: "Userspace"
description: "Userspace Networking mode allows running Tailscale where you don't have access to create a VPN tunnel device."
schema:
type: boolean
default: true
- variable: accept_dns
label: "Accept DNS"
description: "Accept DNS configuration from the admin console."
schema:
type: boolean
default: false
- variable: routes
label: "Routes"
description: Expose physical subnet routes to your entire Tailscale network.
schema:
type: string
default: ""
- variable: dest_ip
label: "Dest IP"
description: Tells the DNAT mechanism which Destination IP to set in the IP header, and where to send packets that are matched.
schema:
type: string
default: ""
- variable: sock5_server
label: "Sock5 Server"
schema:
type: string
default: ""
- variable: extra_args
label: "Extra Args"
schema:
type: string
default: ""
# Include{containerConfig}
# Include{serviceRoot}
- variable: main
label: "Main Service"
description: "The Primary service on which the healthcheck runs, often the webUI"
schema:
additional_attrs: true
type: dict
attrs:
# Include{serviceSelector}
- variable: main
label: "Main Service Port Configuration"
schema:
additional_attrs: true
type: dict
attrs:
- variable: port
label: "Port"
description: "This port exposes the container port on the service"
schema:
type: int
default: 41641
required: true
# Include{advancedPortUDP}
- variable: targetPort
label: "Target Port"
description: "The internal(!) port on the container the Application runs on"
schema:
type: int
default: 41641
# Include{serviceExpertRoot}
default: false
# Include{serviceExpert}
# Include{serviceList}
# Include{persistenceRoot}
- variable: config
label: "App Config Storage"
description: "Stores the Application Configuration."
schema:
additional_attrs: true
type: dict
attrs:
# Include{persistenceBasic}
# Include{persistenceAdvanced}
# Include{persistenceList}
# Include{ingressRoot}
- variable: main
label: "Main Ingress"
schema:
additional_attrs: true
type: dict
attrs:
# Include{ingressDefault}
# Include{ingressTLS}
# Include{ingressTraefik}
# Include{ingressExpert}
# Include{ingressList}
# Include{security}
# Include{securityContextAdvancedRoot}
- variable: privileged
label: "Privileged mode"
schema:
type: boolean
default: false
- variable: readOnlyRootFilesystem
label: "ReadOnly Root Filesystem"
schema:
type: boolean
default: false
- variable: allowPrivilegeEscalation
label: "Allow Privilege Escalation"
schema:
type: boolean
default: false
- variable: runAsNonRoot
label: "runAsNonRoot"
schema:
type: boolean
default: false
# Include{securityContextAdvanced}
# Include{podSecurityContextRoot}
- variable: runAsUser
label: "runAsUser"
description: "The UserID of the user running the application"
schema:
type: int
default: 0
- variable: runAsGroup
label: "runAsGroup"
description: "The groupID this App of the user running the application"
schema:
type: int
default: 0
- variable: fsGroup
label: "fsGroup"
description: "The group that should own ALL storage."
schema:
type: int
default: 568
# Include{podSecurityContextAdvanced}
# Include{resources}
# Include{advanced}
# Include{addons}
# Include{documentation}