feat(derp): optimize the derp chart template

.gitmodules

@@ -1,3 +1 @@
-[submodule "charts/pgedge"]
+
-	path = charts/pgedge
-	url = https://github.com/pgEdge/pgedge-helm.git

README.md

@@ -1,5 +1,8 @@
-helm charts
+## helm charts
 
+```shell
 helm repo add devcm https://devcm-repo.github.io/helm-charts
+```
 
-pgedge
+### charts
+- tailscale-derp

charts/tailscale-derp/Chart.yaml

@@ -0,0 +1,13 @@
+apiVersion: v2
+name: tailscale-derp
+description: Tailscale DERP Relay Server Helm Chart
+home: https://devcm-repo.github.io/helm-charts/
+sources:
+  - https://github.com/devcm-repo/helm-charts
+maintainers:
+  - name: dev.cm
+    email: [email protected]
+    url: https://github.com/devcm-repo
+icon: https://tailscale.com/files/apple-touch-icon.png
+version: 0.0.3
+appVersion: 1.68.0

charts/tailscale-derp/README.md

@@ -0,0 +1,41 @@
+# tailscale-derp Helm Chart
+
+This Helm Chart is a Tailscale container deployment for a tailnet relay server (DERP).
+
+## Installing the Helm Chart
+
+```shell
+helm repo add tailscale https://devcm-repo.github.io/helm-charts
+helm install tailscale-derp tailscale/tailscale-derp
+```
+
+## Helm Chart Configuration Examples
+
+A working configuration:
+
+```yaml
+hostname: derp.dev.cm
+
+nodeSelector:
+  topology.kubernetes.io/region: cn-hk
+```
+
+## Helm Chart Values
+
+| Key | Description | Default |
+|---|---|---|
+| `image.name` | Name of the container image to use. | `docker.io/sspreitzer/tailscale-derp` |
+| `image.pullPolicy` | Kubernetes pullPolicy to use for starting the container image. | `IfNotPresent` |
+| `service.type` | Kubernetes Service type. | `LoadBalancer` |
+| `service.annotations` | A map/dict of Kubernetes Service annotations. | `{}` |
+| `hostNetwork` | This service will be disabled when hostNetwork is enableds. | `false` |
+| `nodeSelector` | A map/dict of Kubernetes Pod nodeSelector node labels. | `{}` |
+| `extraVolumes` | Extra volumes to add to the deployment. | `[]` |
+| `extraVolumeMounts` | Extra volume mounts to add to the container. Normally used with `extraVolumes`. | `[]` |
+| `affinity` | A map/dict of Kubernetes Pod affinity rules. | `{}` |
+| `derp.hostname` | Derp server hostname. | `'derp.examples.com'` |
+| `derp.verify_clients` | Derp server will enable authentication. | `true` |
+| `derp.certdir` | Start a derper with your own certificate. | `` |
+| `derp.http_port` | The port on which to serve HTTP. Set to -1 to disable. | `80` |
+| `derp.https_port` | The port on which to serve HTTPS. | `443` |
+| `derp.stun_port` | The UDP port on which to serve STUN. | `3478` |

charts/tailscale-derp/templates/deployment.yml

@@ -0,0 +1,74 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: "{{ .Release.Name }}-{{ .Chart.Name }}"
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: "{{ .Release.Name }}-{{ .Chart.Name }}"
+  template:
+    metadata:
+      labels:
+        app: "{{ .Release.Name }}-{{ .Chart.Name }}"
+    spec:
+      {{- if not (empty .Values.nodeSelector) }}
+      nodeSelector: {{- toYaml .Values.nodeSelector | nindent 8 }}
+      {{- end }}
+      {{- if not (empty .Values.affinity) }}
+      affinity: {{- toYaml .Values.affinity | nindent 8 }}
+      {{- end }}
+      containers:
+        - name: "{{ .Release.Name }}-{{ .Chart.Name }}"
+          image: "{{ .Values.image.name }}:v{{ .Chart.AppVersion }}"
+          ports:
+            {{- if gt (int .Values.derp.http_port) -1 }}
+            - name: http
+              hostPort: {{ .Values.derp.http_port }}
+              containerPort: {{ .Values.derp.http_port }}
+              protocol: TCP
+            {{- end }}
+            - name: https
+              hostPort: {{ .Values.derp.https_port }}
+              containerPort: {{ .Values.derp.https_port }}
+              protocol: TCP
+            - name: stun
+              hostPort: {{ .Values.derp.stun_port }}
+              containerPort: {{ .Values.derp.stun_port }}
+              protocol: UDP
+          args:
+            - "--hostname={{ .Values.derp.hostname }}"
+            - "--verify-clients={{ .Values.derp.verify_clients }}"
+            {{- if .Values.derp.certdir }}
+            - "--certmode=manual"
+            - "--certdir={{ .Values.derp.certdir }}"
+            {{- end }}
+            {{- if .Values.derp.http_port }}
+            - "--http-port={{ .Values.derp.http_port }}"
+            {{- end }}
+            {{- if .Values.derp.https_port }}
+            - "--a=:{{ .Values.derp.https_port }}"
+            {{- end }}
+            {{- if .Values.derp.stun_port }}
+            - "--stun-port={{ .Values.derp.stun_port }}"
+            {{- end }}
+          volumeMounts:
+            {{- toYaml .Values.extraVolumeMounts | nindent 12 }}
+            {{- if .Values.derp.verify_clients }}
+            - mountPath: /var/run/tailscale/tailscaled.sock
+              name: tailscale-socket
+            {{- end }}
+      {{- if .Values.hostNetwork }}
+      hostNetwork: true
+      {{- end }}
+      volumes:
+        {{- toYaml .Values.extraVolumes | nindent 8 }}
+        {{- if .Values.derp.verify_clients }}
+        - hostPath:
+            path: /run/tailscale/tailscaled.sock
+            type: Socket
+          name: tailscale-socket
+        {{- end }}
+

charts/tailscale-derp/templates/service.yml

@@ -0,0 +1,26 @@
+{{- if not .Values.hostNetwork }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: "{{ .Release.Name }}-{{ .Chart.Name }}"
+  {{- if not (empty .Values.service.annotations) }}
+  annotations: {{- toYaml .Values.service.annotations | nindent 4 }} 
+  {{- end }}
+spec:
+  type: "{{ .Values.service.type }}"
+  selector:
+    app: "{{ .Release.Name }}-{{ .Chart.Name }}"
+  ports:
+    {{- if gt (int .Values.derp.http_port) -1 }}
+    - name: http
+      port: {{ .Values.derp.http_port }}
+      targetPort: {{ .Values.derp.http_port }}
+    {{- end }}
+    - name: https
+      port: {{ .Values.derp.https_port }}
+      targetPort: {{ .Values.derp.https_port }}
+    - name: stun
+      port: {{ .Values.derp.stun_port }}
+      targetPort: {{ .Values.derp.stun_port }}
+      protocol: UDP
+{{- end }}

charts/tailscale-derp/values.yaml

@@ -0,0 +1,20 @@
+image:
+  name: docker.io/devcm/tailscale-derp
+  pullPolicy: IfNotPresent
+
+service:
+  type: ClusterIP
+  annotations: {}
+
+hostNetwork: false
+
+nodeSelector: {}
+
+affinity: {}
+
+derp:
+  hostname: derp.examples.com
+  verify_clients: false
+  http_port: 80
+  https_port: 443
+  stun_port: 3478