feat(freeradius): migrate deployment to ArgoCD

2026-09-07 16:08:09 +02:00
parent 1817d0f0d4
commit 4d062aaa65
7 changed files with 219 additions and 0 deletions
@@ -0,0 +1,98 @@
+replicaCount: 1
+
+containerPorts:
+  auth: 1812
+  acct: 1813
+  coa: 3799
+  radsec: 2083
+  status: 18121
+
+livenessProbe:
+  enabled: true
+  initialDelaySeconds: 120
+  periodSeconds: 60
+  timeoutSeconds: 2
+  failureThreshold: 3
+  successThreshold: 1
+
+readinessProbe:
+  enabled: true
+  initialDelaySeconds: 30
+  periodSeconds: 10
+  timeoutSeconds: 1
+  failureThreshold: 3
+  successThreshold: 1
+
+persistence:
+  enabled: true
+  storageClass: longhorn
+  accessModes:
+    - ReadWriteOnce
+  size: 1Gi
+
+service:
+  type: NodePort
+  ports:
+    auth: 1812
+    acct: 1813
+    coa: 3799
+    radsec: 2083
+    status: 18121
+  externalTrafficPolicy: Local
+  nodePorts:
+    auth: "30812"
+    acct: "31813"
+    coa: ""
+    radsec: ""
+    status: ""
+
+externalDatabase:
+  host: postgresql-prod-rw.postgresql.svc.cluster.local
+  port: 5432
+  user: radius
+  database: radius
+  password: "tK2sItGczjpsH3zLnCVRsyt3GL9K20Wx3VlpFVlTg92tTExuBrE9VmdLqiNGIMsO"
+
+modsEnabled:
+  sql:
+    enabled: true
+    dialect: postgresql
+    table:
+      client: nas
+      acct1: radacct
+      acct2: radacct
+      authcheck: radcheck
+      authreply: radreply
+      groupcheck: radgroupcheck
+      groupreply: radgroupreply
+      postauth: radpostauth
+      usergroup: radusergroup
+    readClients: true
+
+podSecurityContext:
+  enabled: true
+
+tls:
+  enabled: true
+  autoGenerated: false
+
+  certFilename: tls.crt
+  certKeyFilename: tls.key
+  certCAFilename: ca.crt
+
+  secretName: ~
+  existingSecret: freeradius-tls
+
+sitesEnabled:
+  coa:
+    enabled: false
+
+  status:
+    enabled: true
+    listen: 127.0.0.1
+    secret: adminsecret
+
+  tls:
+    enabled: true
+    privateKeyPassword: ""
+    cipher: DEFAULT