feat: automate private tailnet access on cp1

2026-03-08 04:16:06 +00:00
parent 7c15ac5846
commit f95e0051a5
4 changed files with 88 additions and 4 deletions
--- a/ansible/site.yml
+++ b/ansible/site.yml
@@ -112,6 +112,17 @@
    - role: observability-content
      when: not (observability_gitops_enabled | default(true) | bool)

+- name: Configure private tailnet access
+  hosts: control_plane[0]
+  become: true
+  vars:
+    private_access_grafana_port: 30080
+    private_access_prometheus_port: 30990
+    private_access_flux_port: 30901
+
+  roles:
+    - private-access
+
 - name: Finalize
  hosts: localhost
  connection: local