feat: automate private tailnet access on cp1

2026-03-08 04:16:06 +00:00
parent 7c15ac5846
commit f95e0051a5
4 changed files with 88 additions and 4 deletions
--- a/ansible/roles/private-access/templates/kubectl-port-forward.service.j2
+++ b/ansible/roles/private-access/templates/kubectl-port-forward.service.j2
@@ -0,0 +1,13 @@
+[Unit]
+Description={{ unit_description }}
+After=network-online.target k3s.service
+Wants=network-online.target
+
+[Service]
+Type=simple
+Restart=always
+RestartSec=5
+ExecStart=/usr/local/bin/kubectl -n {{ unit_namespace }} port-forward --address 127.0.0.1 {{ unit_target }} {{ unit_local_port }}:{{ unit_remote_port }}
+
+[Install]
+WantedBy=multi-user.target