MichaelFisher1997
68dbd2e5b7
Reserve grafana/prometheus/flux alongside rancher during rebuild cleanup so stale tailnet devices do not force -1 hostnames. Tag the exposed Tailscale services so operator-managed proxies are provisioned with explicit prod/service tags from the tailnet policy.
20 lines
424 B
YAML
20 lines
424 B
YAML
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: grafana-tailscale
|
|
namespace: observability
|
|
annotations:
|
|
tailscale.com/hostname: grafana
|
|
tailscale.com/tags: "tag:prod,tag:grafana"
|
|
tailscale.com/proxy-class: infra-stable
|
|
spec:
|
|
type: LoadBalancer
|
|
loadBalancerClass: tailscale
|
|
selector:
|
|
app.kubernetes.io/name: grafana
|
|
ports:
|
|
- name: http
|
|
port: 80
|
|
protocol: TCP
|
|
targetPort: 3000
|