feat(freeradius): migrate deployment to ArgoCD

application.yaml

@@ -0,0 +1,35 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: freeradius
+  namespace: argocd
+
+spec:
+  project: default
+
+  sources:
+    - repoURL: oci://gitea.infrastructure.helmholz.cloud/gitea_admin/helm
+      chart: freeradius
+      targetRevision: 1.0.12
+      helm:
+        valueFiles:
+          - $values/values.yaml
+
+    - repoURL: ssh://git@gitea-ssh.gitea.svc.cluster.local:22/gitea_admin/FreeRADIUS.git
+      targetRevision: main
+      ref: values
+
+    - repoURL: ssh://git@gitea-ssh.gitea.svc.cluster.local:22/gitea_admin/FreeRADIUS.git
+      targetRevision: main
+      path: manifests
+
+  destination:
+    server: "https://138.199.131.114:6443"
+    namespace: freeradius-new
+
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true

certs/dh.pem

@@ -0,0 +1,8 @@
+-----BEGIN DH PARAMETERS-----
+MIIBCAKCAQEAmTz/pyBq/Z/b+3FBsJal4JIoT3jibTQ5NsLgUxVX83YayBMfB8o+
+Y/kFAtspKLJtXgZ9uNwAcpqBBw19o6vbxsDcln3Gi6IO24uiZrpaWkTAoLZsuOK0
+bbE0cFCruWGWv4IDDfvFffRq7mNrI1LK3IkeROu7CuE53lpwRe1JtTK4OPfeerPk
+2vyojQJWzkLUz8th2bubMGYvSZ6I8mTXTzsk3eGzxAIWGwd1GvuUwX9+pHiDVbac
+ZYAr6NHkSq2nyU11bb92XjR5+yoDGoKapyAxB+B9ZBRVAQ7RHMkcGNyZT/6eGRCw
+kHDGqo+qiJBqB8hmvAEwoAWMRgUYd1mZPwIBAg==
+-----END DH PARAMETERS-----

certs/freeradius-auth-ca.crt

@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

certs/freeradius-key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEoQIBAAKCAQEAvij0IoVdfjj7mLZJWFKj4UO96Hy6JQsHvMG/HybeorGL64Bc
+vb3L7v/Nwc5hGkgrxXmFJ0eNAc7QsD9wpCi3mEd2tyZeyspZwFelwuC8XiItzO+f
+YNwdXFVtwcqy2ouMhGHPnMOrQByrh8Dislz3QbST16Qhq7Qvytih+7xgP5+qnsYg
+OnVFOf9Tw0fuci4Xg7mFLGx64St1K9gpeSGGK+k6HxnCC9N8Jy+ZYA/FZfzAS1s8
+dVCzTFhR6pnm4+Cz/pu7UkOoCOS5mDh8UCGv+f1EjlMQ7RHJegNTpAenqPpGt26z
+nYKp/wPc3qVPoZ350c1anqdf9wArsPlgvcMJaQIDAQABAoH/ZhgIiSrYQCU7YRdg
+u0OjKocXxA+kxHd86NqqwfJxznW9N7MkwkhdGLshoJae4O8z5kOtVfeihB0TtRrM
+Jjon5ig/PzIhsoXU/1Ly5ObgOzgee1qdNw5L0ZxE++MQzgweLEpXSUTgyPzUcGNz
+/Wt6cQVJd0RSXcDuIMERxN0JCKz8jKpPqnVfhsKZhPdCYNOWM2mZ+LZY34Mxn5ie
+T4bc4fIrnPNCiZicyq9HK2z6GzxcESnljr4vBwv3cJnTBAfzKjKo3b53k+qLVeAR
+PIJBudhIfo6SzuPGCCIuibKT/97eKW1fkRGxSPWjPFBSvGRJ3wzqYoum3BCHrpAe
+XXQRAoGBAN9a3mrFyXOUehXXlY3OYomcr7IJ37rtjZJyTDS40uESYj7Wqc9HQsk5
+bmDKH2US35LJnZuWLNXon28IbrCC5WkAXWUBG41qcj8Li5CMZbM4B32ryH6iD0oh
+FbjpU2ZUxZ1NdxmXlfzTuJr65NHlb6id+M8Welrdk0s/Gv0hQSv1AoGBANn0DJlQ
+eDcU0clMvSMnq7+6IZQghErC1Jpzx++LQ49vWs1VQCwDVTs1bXt+5fZop5ayBU0p
+R4dPoezyFP2PZsPm/yE3xwsedSYO5RUncm268P/+KCSMlCSkOZJxQPlAvog9wC0t
+dMg9vW6kTt5KD2+MZTATbHxghjodDVMwcpMlAoGAQBGBwWDw012g04kelinAbDbs
+0wYwDh+8P2jX4TuvCe7LDblnxlRrnOsDdXIlJUoPpbx9oDaor8dljGT/01QI2GDJ
+aYKy05LYKKt4IkOTnKASzgKrpV95QUtSPtN3H+BrOx8Qbd/knzxgNNyJLIhCyjxe
+NZD+EfiDGs+EP139os0CgYEAkhbbOwiNC56Q33Tocd/tZx3D1B3XjqT5DG3+3blj
+F4l0O52g3d9+CanOMLDmQzvy2TeKBiZdI31k9AVvvGWaZEU5TXKtn+5SZ6gkNQGz
+2YkscOpSzezMf6L0VAxFmMyk6X06iw2k8XMwvjC0DJtnrUVVrdvXI6cvUVSX0eLv
+aWECgYBS07zV381/YNlmCM+E+WTZSZrngjjIeCgcqMJt1t2SpnaBQoHO6DKjJcDk
+8Leg8z7B8Ym5FJfy55ZorkDV7LGI1JGwfc3p3MW2RAVhkkV0LoGHLv8VcD6t3Utq
+dIMkugPE/JQQinZsDD8B3lLBi165OFfxFWS7mJDbHaw34i7ADQ==
+-----END RSA PRIVATE KEY-----

certs/freeradius-server-tls.crt

@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

manifests/secret.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+data:
+  ca.crt: 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
+  tls.crt: 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
+  tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFb1FJQkFBS0NBUUVBdmlqMElvVmRmamo3bUxaSldGS2o0VU85Nkh5NkpRc0h2TUcvSHliZW9yR0w2NEJjCnZiM0w3di9Od2M1aEdrZ3J4WG1GSjBlTkFjN1FzRDl3cENpM21FZDJ0eVpleXNwWndGZWx3dUM4WGlJdHpPK2YKWU53ZFhGVnR3Y3F5Mm91TWhHSFBuTU9yUUJ5cmg4RGlzbHozUWJTVDE2UWhxN1F2eXRpaCs3eGdQNStxbnNZZwpPblZGT2Y5VHcwZnVjaTRYZzdtRkxHeDY0U3QxSzlncGVTR0dLK2s2SHhuQ0M5TjhKeStaWUEvRlpmekFTMXM4CmRWQ3pURmhSNnBubTQrQ3ovcHU3VWtPb0NPUzVtRGg4VUNHditmMUVqbE1RN1JISmVnTlRwQWVucVBwR3QyNnoKbllLcC93UGMzcVZQb1ozNTBjMWFucWRmOXdBcnNQbGd2Y01KYVFJREFRQUJBb0gvWmhnSWlTcllRQ1U3WVJkZwp1ME9qS29jWHhBK2t4SGQ4Nk5xcXdmSnh6blc5TjdNa3draGRHTHNob0phZTRPOHo1a090VmZlaWhCMFR0UnJNCkpqb241aWcvUHpJaHNvWFUvMUx5NU9iZ096Z2VlMXFkTnc1TDBaeEUrK01Remd3ZUxFcFhTVVRneVB6VWNHTnoKL1d0NmNRVkpkMFJTWGNEdUlNRVJ4TjBKQ0t6OGpLcFBxblZmaHNLWmhQZENZTk9XTTJtWitMWlkzNE14bjVpZQpUNGJjNGZJcm5QTkNpWmljeXE5SEsyejZHenhjRVNubGpyNHZCd3YzY0puVEJBZnpLaktvM2I1M2srcUxWZUFSClBJSkJ1ZGhJZm82U3p1UEdDQ0l1aWJLVC85N2VLVzFma1JHeFNQV2pQRkJTdkdSSjN3enFZb3VtM0JDSHJwQWUKWFhRUkFvR0JBTjlhM21yRnlYT1VlaFhYbFkzT1lvbWNyN0lKMzdydGpaSnlURFM0MHVFU1lqN1dxYzlIUXNrNQpibURLSDJVUzM1TEpuWnVXTE5Yb24yOElickNDNVdrQVhXVUJHNDFxY2o4TGk1Q01aYk00QjMycnlINmlEMG9oCkZianBVMlpVeFoxTmR4bVhsZnpUdUpyNjVOSGxiNmlkK004V2VscmRrMHMvR3YwaFFTdjFBb0dCQU5uMERKbFEKZURjVTBjbE12U01ucTcrNklaUWdoRXJDMUpwengrK0xRNDl2V3MxVlFDd0RWVHMxYlh0KzVmWm9wNWF5QlUwcApSNGRQb2V6eUZQMlBac1BtL3lFM3h3c2VkU1lPNVJVbmNtMjY4UC8rS0NTTWxDU2tPWkp4UVBsQXZvZzl3QzB0CmRNZzl2VzZrVHQ1S0QyK01aVEFUYkh4Z2hqb2REVk13Y3BNbEFvR0FRQkdCd1dEdzAxMmcwNGtlbGluQWJEYnMKMHdZd0RoKzhQMmpYNFR1dkNlN0xEYmxueGxScm5Pc0RkWElsSlVvUHBieDlvRGFvcjhkbGpHVC8wMVFJMkdESgphWUt5MDVMWUtLdDRJa09UbktBU3pnS3JwVjk1UVV0U1B0TjNIK0JyT3g4UWJkL2tuenhnTk55SkxJaEN5anhlCk5aRCtFZmlER3MrRVAxMzlvczBDZ1lFQWtoYmJPd2lOQzU2UTMzVG9jZC90WngzRDFCM1hqcVQ1REczKzNibGoKRjRsME81MmczZDkrQ2FuT01MRG1RenZ5MlRlS0JpWmRJMzFrOUFWdnZHV2FaRVU1VFhLdG4rNVNaNmdrTlFHegoyWWtzY09wU3plek1mNkwwVkF4Rm1NeWs2WDA2aXcyazhYTXd2akMwREp0bnJVVlZyZHZYSTZjdlVWU1gwZUx2CmFXRUNnWUJTMDd6VjM4MS9ZTmxtQ00rRStXVFpTWnJuZ2pqSWVDZ2NxTUp0MXQyU3BuYUJRb0hPNkRLakpjRGsKOExlZzh6N0I4WW01RkpmeTU1Wm9ya0RWN0xHSTFKR3dmYzNwM01XMlJBVmhra1YwTG9HSEx2OFZjRDZ0M1V0cQpkSU1rdWdQRS9KUVFpblpzREQ4QjNsTEJpMTY1T0ZmeEZXUzdtSkRiSGF3MzRpN0FEUT09Ci0tLS0tRU5EIFJTQSBQUklWQVRFIEtFWS0tLS0tCg==
+kind: Secret
+metadata:
+  creationTimestamp: null
+  name: freeradius-tls
+  namespace: freeradius-new
+###
+# kubectl create secret generic freeradius-tls \
+#   -n freeradius-new \
+#   --from-file=tls.crt=certs/freeradius-server-tls.crt \
+#   --from-file=tls.key=certs/freeradius-key.pem \
+#   --from-file=ca.crt=certs/freeradius-auth-ca.crt \
+#   --dry-run=client -o yaml > secret.yaml
+###

values.yaml

@@ -0,0 +1,98 @@
+replicaCount: 1
+
+containerPorts:
+  auth: 1812
+  acct: 1813
+  coa: 3799
+  radsec: 2083
+  status: 18121
+
+livenessProbe:
+  enabled: true
+  initialDelaySeconds: 120
+  periodSeconds: 60
+  timeoutSeconds: 2
+  failureThreshold: 3
+  successThreshold: 1
+
+readinessProbe:
+  enabled: true
+  initialDelaySeconds: 30
+  periodSeconds: 10
+  timeoutSeconds: 1
+  failureThreshold: 3
+  successThreshold: 1
+
+persistence:
+  enabled: true
+  storageClass: longhorn
+  accessModes:
+    - ReadWriteOnce
+  size: 1Gi
+
+service:
+  type: NodePort
+  ports:
+    auth: 1812
+    acct: 1813
+    coa: 3799
+    radsec: 2083
+    status: 18121
+  externalTrafficPolicy: Local
+  nodePorts:
+    auth: "30812"
+    acct: "31813"
+    coa: ""
+    radsec: ""
+    status: ""
+
+externalDatabase:
+  host: postgresql-prod-rw.postgresql.svc.cluster.local
+  port: 5432
+  user: radius
+  database: radius
+  password: "tK2sItGczjpsH3zLnCVRsyt3GL9K20Wx3VlpFVlTg92tTExuBrE9VmdLqiNGIMsO"
+
+modsEnabled:
+  sql:
+    enabled: true
+    dialect: postgresql
+    table:
+      client: nas
+      acct1: radacct
+      acct2: radacct
+      authcheck: radcheck
+      authreply: radreply
+      groupcheck: radgroupcheck
+      groupreply: radgroupreply
+      postauth: radpostauth
+      usergroup: radusergroup
+    readClients: true
+
+podSecurityContext:
+  enabled: true
+
+tls:
+  enabled: true
+  autoGenerated: false
+
+  certFilename: tls.crt
+  certKeyFilename: tls.key
+  certCAFilename: ca.crt
+
+  secretName: ~
+  existingSecret: freeradius-tls
+
+sitesEnabled:
+  coa:
+    enabled: false
+
+  status:
+    enabled: true
+    listen: 127.0.0.1
+    secret: adminsecret
+
+  tls:
+    enabled: true
+    privateKeyPassword: ""
+    cipher: DEFAULT