feat(tailscale): tailscale drep refactoring

.gitmodules

@@ -1,3 +1 @@
-[submodule "charts/pgedge"]
-	path = charts/pgedge
-	url = https://github.com/pgEdge/pgedge-helm.git
+

README.md

@@ -1,5 +1,8 @@
-helm charts
+## helm charts
 
+```shell
 helm repo add devcm https://devcm-repo.github.io/helm-charts
+```
 
-pgedge
+### charts
+- tailscale-derp

charts/tailscale-derp/Chart.yaml

@@ -0,0 +1,13 @@
+apiVersion: v2
+name: tailscale-derp
+description: Tailscale DERP Relay Server Helm Chart
+home: https://devcm-repo.github.io/helm-charts/
+sources:
+  - https://github.com/devcm-repo/helm-charts
+maintainers:
+  - name: dev.cm
+    email: [email protected]
+    url: https://github.com/devcm-repo
+icon: https://tailscale.com/files/apple-touch-icon.png
+version: 0.0.2
+appVersion: 1.68.0

charts/tailscale-derp/README.md

@@ -0,0 +1,36 @@
+# tailscale-derp Helm Chart
+
+This Helm Chart is a Tailscale container deployment for a tailnet relay server (DERP).
+
+## Installing the Helm Chart
+
+```shell
+helm repo add tailscale https://devcm-repo.github.io/helm-charts
+helm install tailscale-derp tailscale/tailscale-derp
+```
+
+## Helm Chart Configuration Examples
+
+A working configuration:
+
+```yaml
+hostname: derp.dev.cm
+
+nodeSelector:
+  topology.kubernetes.io/region: cn-hk
+```
+
+## Helm Chart Values
+
+| Key | Description | Default |
+|---|---|---|
+| `image.name` | Name of the container image to use. | `docker.io/sspreitzer/tailscale-derp` |
+| `image.pullPolicy` | Kubernetes pullPolicy to use for starting the container image. | `IfNotPresent` |
+| `service.type` | Kubernetes Service type. | `LoadBalancer` |
+| `service.annotations` | A map/dict of Kubernetes Service annotations. | `{}` |
+| `nodeSelector` | A map/dict of Kubernetes Pod nodeSelector node labels. | `{}` |
+| `affinity` | A map/dict of Kubernetes Pod affinity rules. | `{}` |
+| `tailscale.hostname` | Tailscale hostname | `Release.Name` |
+| `tailscale.auth_key` | Tailscale auth_key | `''` |
+| `drep.hostname` | Derp server hostname | `'derp.examples.com'` |
+| `drep.verify_clients` | Derp server will enable authentication | `true` |

charts/tailscale-derp/templates/deployment.yml

@@ -0,0 +1,40 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: "{{ .Release.Name }}-{{ .Chart.Name }}"
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: "{{ .Release.Name }}-{{ .Chart.Name }}"
+  template:
+    metadata:
+      labels:
+        app: "{{ .Release.Name }}-{{ .Chart.Name }}"
+    spec:
+      {{- if not (empty .Values.nodeSelector) }}
+      nodeSelector: {{- toYaml .Values.nodeSelector | nindent 8 }}
+      {{- end }}
+      {{- if not (empty .Values.affinity) }}
+      affinity: {{- toYaml .Values.affinity | nindent 8 }}
+      {{- end }}
+      containers:
+        name: "{{ .Release.Name }}-{{ .Chart.Name }}"
+          image: "{{ .Values.image.name }}:v{{ .Chart.AppVersion }}"
+          ports:
+            - containerPort: 80
+            - containerPort: 443
+            - containerPort: 3478
+          env:
+            - name: TAILSCALE_HOSTNAME
+              value: "{{ or .Values.tailscale.hostname .Release.Name }}"
+            - name: TAILSCALE_AUTH_KEY
+              value: "{{ .Values.tailscale.auth_key }}"
+            - name: TAILSCALE_DERP_HOSTNAME
+              value: "{{ .Values.drep.hostname }}"
+            - name: TAILSCALE_DERP_ADDR
+              value: "{{ .Values.drep.addr }}"
+            - name: TAILSCALE_DERP_VERIFY_CLIENTS
+              value: "{{ .Values.drep.verify_clients }}"

charts/tailscale-derp/templates/service.yml

@@ -0,0 +1,21 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: "{{ .Release.Name }}-{{ .Chart.Name }}"
+  {{- if not (empty .Values.service.annotations) }}
+  annotations: {{- toYaml .Values.service.annotations | nindent 4 }} 
+  {{- end }}
+spec:
+  type: "{{ .Values.service.type }}"
+  selector:
+    app: "{{ .Release.Name }}-{{ .Chart.Name }}"
+  ports:
+    - name: http
+      port: 80
+      targetPort: 80
+    - name: https
+      port: 443
+      targetPort: 443
+    - name: stun
+      port: 3478
+      targetPort: 3478

charts/tailscale-derp/values.yaml

@@ -0,0 +1,20 @@
+image:
+  name: docker.io/devcm/tailscale-derp
+  pullPolicy: IfNotPresent
+
+service:
+  type: ClusterIP
+  annotations: {}
+
+nodeSelector: {}
+
+affinity: {}
+
+tailscale:
+# hostname: ''
+  auth_key: ''
+
+drep:
+  hostname: derp.examples.com
+# addr: ''
+  verify_clients: true