feat(k3s): 密码切换为密钥 & 相关服务升级

apps/infra/net/crowdsec/helmchart.yaml

@@ -93,6 +93,12 @@ spec:
           enabled: false
         data:
           enabled: false
+      env:
+        - name: DB_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: cnpg17-cluster-hk-app
+              key: password
     config:
       # api config.yaml配置
       config.yaml.local: |
@@ -102,7 +108,7 @@ spec:
           port: 5432
           db_name: crowdsec
           user: app
-          password: FybaFtf6NV5jnxhj5bOPpHbO6KypZeHiyiskgAWkM5nioW2j82HtCf6GnW9xVKjE
+          password: ${DB_PASSWORD}
           sslmode: require
         api:
           server:

apps/infra/net/nginx/helmchart.yaml

@@ -19,7 +19,7 @@ spec:
       nodeSelector:
         svccontroller.k3s.cattle.io/enablelb: "true"
       tolerations:
-        - key: "node-role.kubernetes.io/master"
+        - key: "node-role.kubernetes.io/control-plane"
           operator: "Exists"
           effect: "NoSchedule"
       labels:

apps/infra/net/tailscale/helmchart.yaml

@@ -12,7 +12,7 @@ spec:
     nodeSelector:
       kubernetes.io/hostname: tchk
     image:
-      tag: v1.90.8
+      tag: v1.94.1
     hostNetwork: true
     extraVolumes:
       - name: cert-volume