feat(k8s): change main cidr

chkpwd · chkpwd · commit dea60a113a35 · 2025-06-28T22:58:02.000-04:00
diff --git a/kubernetes/apps/actual/helm-release.yml b/kubernetes/apps/actual/helm-release.yml
@@ -62,6 +62,7 @@ spec:
               ACTUAL_LOGIN_METHOD: openid
               ACTUAL_ALLOWED_LOGIN_METHODS: '["openid"]'
               ACTUAL_OPENID_PROVIDER_NAME: Authentik
+              ACTUAL_OPENID_ENFORCE: true
               ACTUAL_USER_CREATION_MODE: login
               ACTUAL_OPENID_DISCOVERY_URL: https://authentik.chkpwd.com/application/o/actual/
               ACTUAL_OPENID_CLIENT_ID:
diff --git a/kubernetes/apps/plex/helm-release.yml b/kubernetes/apps/plex/helm-release.yml
@@ -75,8 +75,8 @@ spec:
               pullPolicy: IfNotPresent
             env:
               TZ: "America/New_York"
-              PLEX_ADVERTISE_URL: &plex_lb "172.16.16.35"
-              PLEX_NO_AUTH_NETWORKS: "172.16.16.0/24"
+              PLEX_ADVERTISE_URL: &plex_lb "10.0.10.35"
+              PLEX_NO_AUTH_NETWORKS: "10.0.10.0/24"
               PLEX_CLAIM:
                 valueFrom:
                   secretKeyRef:
diff --git a/kubernetes/apps/qbittorrent/helm-release.yml b/kubernetes/apps/qbittorrent/helm-release.yml
@@ -108,7 +108,7 @@ spec:
         controller: qbittorrent
         type: LoadBalancer
         annotations:
-          lbipam.cilium.io/ips: 172.16.16.34
+          lbipam.cilium.io/ips: 10.0.10.34
         ports:
           http:
             port: *webPort
diff --git a/kubernetes/apps/unifi-controller/dns-endpoint.yml b/kubernetes/apps/unifi-controller/dns-endpoint.yml
@@ -10,4 +10,4 @@ spec:
       recordTTL: 180
       recordType: A
       targets:
-        - 172.16.16.33
+        - 10.0.10.33
diff --git a/kubernetes/apps/unifi-controller/helm-release.yml b/kubernetes/apps/unifi-controller/helm-release.yml
@@ -98,7 +98,7 @@ spec:
       app:
         controller: unifi-controller
         annotations:
-          lbipam.cilium.io/ips: 172.16.16.33
+          lbipam.cilium.io/ips: 10.0.10.33
         type: LoadBalancer
         externalTrafficPolicy: Cluster
         ports:
diff --git a/kubernetes/core/cilium/pools.yml b/kubernetes/core/cilium/pools.yml
@@ -6,4 +6,4 @@ metadata:
   name: default-pool
 spec:
   blocks:
-    - cidr: "172.16.16.0/24"
+    - cidr: "10.0.10.0/24"
diff --git a/kubernetes/core/external-dns/_components/internal/dns-endpoints.yml b/kubernetes/core/external-dns/_components/internal/dns-endpoints.yml
@@ -8,4 +8,4 @@ spec:
       recordTTL: 180
       recordType: A
       targets:
-        - 172.16.16.30
+        - 10.0.10.30
diff --git a/kubernetes/core/gateway-api/private-class.yml b/kubernetes/core/gateway-api/private-class.yml
@@ -11,7 +11,7 @@ spec:
   gatewayClassName: cilium
   addresses:
     - type: IPAddress
-      value: 172.16.16.30
+      value: 10.0.10.30
   infrastructure:
     annotations:
       external-dns.alpha.kubernetes.io/hostname: *hostname
diff --git a/kubernetes/core/gateway-api/public-class.yml b/kubernetes/core/gateway-api/public-class.yml
@@ -11,7 +11,7 @@ spec:
   gatewayClassName: cilium
   addresses:
     - type: IPAddress
-      value: 172.16.16.31
+      value: 10.0.10.31
   infrastructure:
     annotations:
       external-dns.alpha.kubernetes.io/hostname: *hostname
diff --git a/kubernetes/core/gravity/sts.yml b/kubernetes/core/gravity/sts.yml
@@ -27,7 +27,7 @@ spec:
             - name: INSTANCE_LISTEN
               value: 0.0.0.0
             - name: INSTANCE_IP
-              value: 172.16.16.17
+              value: 10.0.10.17
             - name: BOOTSTRAP_ROLES
               value: "dns;api;etcd;monitoring;tsdb"
           envFrom:
diff --git a/kubernetes/core/gravity/svc.yml b/kubernetes/core/gravity/svc.yml
@@ -4,7 +4,7 @@ kind: Service
 metadata:
   name: gravity
   annotations:
-    lbipam.cilium.io/ips: "172.16.16.17"
+    lbipam.cilium.io/ips: "10.0.10.17"
 spec:
   type: LoadBalancer
   selector:
diff --git a/kubernetes/core/multus/resources/iot-bond.yml b/kubernetes/core/multus/resources/iot-bond.yml
@@ -17,7 +17,7 @@ spec:
           "ipam": {
             "type": "static",
             "routes": [
-              { "dst": "172.16.20.0/24", "gw": "172.16.20.1" }
+              { "dst": "10.0.20.0/24", "gw": "10.0.20.1" }
             ]
           }
         }
diff --git a/kubernetes/core/multus/resources/iot-bridge.yml b/kubernetes/core/multus/resources/iot-bridge.yml
@@ -19,15 +19,15 @@ spec:
               "type": "static",
               "addresses": [
                 {
-                  "address": "172.16.10.7/24",
-                  "gateway": "172.16.10.1"
+                  "address": "10.0.20.7/24",
+                  "gateway": "10.0.20.1"
                 }
               ],
               "routes": [
-                { "dst": "172.16.10.0/24" }
+                { "dst": "10.0.20.0/24" }
               ],
               "dns": {
-                "nameservers" : ["172.16.10.1"],
+                "nameservers" : ["10.0.10.4", "8.8.8.8"],
                 "domain": "chkpwd.com",
                 "search": [ "chkpwd.com" ]
               }
diff --git a/kubernetes/core/multus/resources/iot-macvlan.yml b/kubernetes/core/multus/resources/iot-macvlan.yml
@@ -19,7 +19,7 @@ spec:
             "routes": [
               {
                 "dst": "0.0.0.0/0",
-                "gw": "172.16.10.1"
+                "gw": "10.0.20.1"
               }
             ]
           }
diff --git a/kubernetes/core/multus/resources/iot-vlan.yml b/kubernetes/core/multus/resources/iot-vlan.yml
@@ -17,10 +17,10 @@ spec:
             "vlanId": 10,
             "ipam": {
               "type": "host-local",
-              "subnet": "172.16.10.0/24"
+              "subnet": "10.0.20.0/24"
             },
             "dns": {
-              "nameservers": [ "172.16.10.1", "8.8.8.8" ]
+              "nameservers": [ "10.0.10.4", "8.8.8.8" ]
             }
           }
         ]
diff --git a/kubernetes/core/multus/resources/testing-pod.yml b/kubernetes/core/multus/resources/testing-pod.yml
@@ -8,7 +8,7 @@ metadata:
       [{
         "name":"multus-iot",
         "namespace": "networking",
-        "ips": ["172.16.20.133/24"],
+        "ips": ["10.0.20.133/24"],
         "mac": "3e:59:e4:f7:43:08"
       }]
   labels:
diff --git a/kubernetes/talos/talconfig.yml b/kubernetes/talos/talconfig.yml
@@ -1,7 +1,7 @@
 ---
 # yaml-language-server: $schema=https://raw.githubusercontent.com/budimanjojo/talhelper/master/pkg/config/schemas/talconfig.json
 clusterName: cattle-k8s
-endpoint: https://172.16.16.13:6443
+endpoint: https://10.0.10.13:6443
 # renovate: depName=ghcr.io/siderolabs/installer datasource=docker
 talosVersion: v1.9.4
 # renovate: depName=ghcr.io/siderolabs/kubelet datasource=docker
@@ -13,17 +13,17 @@ cniConfig:
   name: none
 nodes:
   - hostname: ct-k8s-01.chkpwd.com
-    ipAddress: 172.16.16.10
+    ipAddress: 10.0.10.10
     controlPlane: true
     installDiskSelector:
       wwid: t10.ATA*
     networkInterfaces:
       - interface: enp0s31f6
         dhcp: true
         vip:
-          ip: &vip 172.16.16.13
+          ip: &vip 10.0.10.13
   - hostname: ct-k8s-02.chkpwd.com
-    ipAddress: 172.16.16.11
+    ipAddress: 10.0.10.11
     controlPlane: true
     installDiskSelector:
       wwid: naa.500a07511f0c132d
@@ -33,7 +33,7 @@ nodes:
         vip:
           ip: *vip
   - hostname: ct-k8s-03.chkpwd.com
-    ipAddress: 172.16.16.12
+    ipAddress: 10.0.10.12
     controlPlane: true
     installDiskSelector:
       wwid: t10.ATA*
@@ -104,7 +104,7 @@ controlPlane:
             maxPods: 150
           nodeIP:
             validSubnets:
-                - 172.16.16.0/24
+                - 10.0.10.0/24
     # Enable MutatingAdmissionPolicy
     - |-
       cluster:
@@ -139,7 +139,7 @@ controlPlane:
       cluster:
         etcd:
           advertisedSubnets:
-            - 172.16.16.0/24
+            - 10.0.10.0/24
     # Configure NFS mount options
     - |
       machine:
