Newer
Older
EnvoyControlPlane / data / config / cds.yaml
resources:
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _acme_renewer
  connect_timeout: 0.2s
  type: STATIC
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: acme_renewer
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 8888
          address:
            socket_address:
              address: 172.17.0.1  #docker bridge
              port_value: 8888
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _git_bucket
  connect_timeout: 0.2s
  type: STATIC
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: git_bucket
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 8088
          address:
            socket_address:
              address: 172.17.0.1   #docker bridge
              port_value: 8088
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _code_server
  connect_timeout: 0.2s
  type: STATIC
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: code_server
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 8080
          address:
            socket_address:
              address: 192.168.68.113  #docker bridge
              port_value: 8080
  transport_socket:
    name: envoy.transport_sockets.tls
    typed_config:
      "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
      common_tls_context:
        validation_context:
          trusted_ca:
            filename: /etc/certs/upstream/vscode/root.crt
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _docker_registry
  connect_timeout: 0.2s
  type: STATIC
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: docker_registry
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 5555
          address:
            socket_address:
              address: 172.17.0.1  #docker bridge
              port_value: 5555
  transport_socket:
    name: envoy.transport_sockets.tls
    typed_config:
      "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
      common_tls_context:
        tls_certificates:
        - certificate_chain: { filename: "/etc/certs/downstream/docker.jerxie.com/fullchain.pem" }
          private_key: { filename: "/etc/certs/downstream/docker.jerxie.com/privkey.pem" }
        # validation_context:
        #   trusted_ca:
        #     filename: "/etc/certs/docker.jerxie.com/chain1.pem"
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _nas_service
  connect_timeout: 0.2s
  type: STATIC
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: nas
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 5000
          address:
            socket_address:
              address: 172.17.0.1  #docker bridge
              port_value: 5000
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _plex_server
  connect_timeout: 0.2s
  type: STATIC
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: nas
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 32400
          address:
            socket_address:
              address: 192.168.68.113
              port_value: 32400
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _nas_video
  connect_timeout: 0.2s
  type: STATIC
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: nas
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 9007
          address:
            socket_address:
              address: 127.0.0.1  #localhost
              port_value: 9007
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _nas_audio
  connect_timeout: 0.2s
  type: STATIC
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: nas
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 8800
          address:
            socket_address:
              address: 127.0.0.1  #localhost
              port_value: 8800
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _nas_note
  connect_timeout: 0.2s
  type: STATIC
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: nas
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 9350
          address:
            socket_address:
              address: 127.0.0.1  #localhost
              port_value: 9350
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _nas_camera
  connect_timeout: 0.2s
  type: STATIC
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: camera
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 9900
          address:
            socket_address:
              address: 127.0.0.1  #localhost
              port_value: 9900
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _nas_photo
  connect_timeout: 0.2s
  type: STATIC
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: nas
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 5080
          address:
            socket_address:
              address: 127.0.0.1 #localhost
              port_value: 5080
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _k8s_apiserver
  connect_timeout: 1s
  type: STRICT_DNS
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: apiserver
    endpoints:
    - lb_endpoints:
      - endpoint: {health_check_config: { port_value: 16443}, address: { socket_address: { address: 192.168.68.139, port_value: 16443 }}}  #192.168.68.254
  transport_socket:
    name: envoy.transport_sockets.tls
    typed_config:
      "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
      common_tls_context:
        validation_context:
          trusted_ca:
            filename: /etc/certs/upstream/kubernetes/root.crt
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _k8s_router
  connect_timeout: 1s
  type: STRICT_DNS
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: nginx
    endpoints:
    - lb_endpoints:
      - endpoint: {health_check_config: { port_value: 32704}, address: { socket_address: { address: 192.168.68.139, port_value: 32704 }}}
      # - endpoint: { address: { socket_address: { address: 192.168.68.114, port_value: 32542 }}}
  # transport_socket:
  #   name: envoy.transport_sockets.tls
  #   typed_config:
  #     "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
  #     common_tls_context:
  #       validation_context:
  #         trusted_ca:
  #           filename: /etc/certs/kubernetes/root.crt
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _3d_printer_console
  connect_timeout: 2s
  type: STRICT_DNS
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: printer
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 5000
          address:
            socket_address:
              address: octoprint
              port_value: 5000
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _3d_printer_camera
  connect_timeout: 2s
  type: STRICT_DNS
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: camera
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 8080
          address:
            socket_address:
              address: octoprint
              port_value: 8080
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _bitwarden_service
  connect_timeout: 0.2s
  type: STATIC
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: pwassword_manager
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 10010
          address:
            socket_address:
              address: 172.17.0.1
              port_value: 10010
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _homeassistant_service
  connect_timeout: 0.2s
  type: STRICT_DNS
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: homeassistant_manager
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 8123
          address:
            socket_address:
              address: 192.168.68.133
              port_value: 8123
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _portainer_ui
  connect_timeout: 0.2s
  type: STRICT_DNS
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: portainer_ui
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 9000
          address:
            socket_address:
              address: 192.168.68.161
              port_value: 9000
  # transport_socket:
  #   name: envoy.transport_sockets.tls
  #   typed_config:
  #     "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
  #     common_tls_context:
  #       validation_context:
  #         trusted_ca:
  #           filename: /etc/certs/upstream/portainer/root.crt
# - "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
#   name: _baby_buddy
#   connect_timeout: 0.2s
#   type: STRICT_DNS
#   lb_policy: ROUND_ROBIN
#   load_assignment:
#     cluster_name: baby_buddy
#     endpoints:
#     - lb_endpoints:
#       - endpoint:
#           health_check_config:
#             port_value: 8555
#           address:
#             socket_address:
#               address: 192.168.68.106
#               port_value: 8555
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _grafana_ui
  connect_timeout: 0.2s
  type: STRICT_DNS
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: _grafana_ui
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 3000
          address:
            socket_address:
              address: 192.168.68.106
              port_value: 3000
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _auth_server
  connect_timeout: 0.2s
  type: STRICT_DNS
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: _auth_server
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 5556
          address:
            socket_address:
              address: 192.168.68.113
              port_value: 5557
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _ai_server
  connect_timeout: 0.2s
  type: STRICT_DNS
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: _ai_server
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 3000
          address:
            socket_address:
              address: 192.168.68.113
              port_value: 3000
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _pcb_server
  connect_timeout: 0.2s
  type: STRICT_DNS
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: _pcb_server
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 8088
          address:
            socket_address:
              address: 192.168.68.113
              port_value: 8088
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _ai_api_server
  connect_timeout: 0.2s
  type: STRICT_DNS
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: _ai_api_server
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 8002
          address:
            socket_address:
              address: 192.168.68.113
              port_value: 8002
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _ai_ui_server
  connect_timeout: 0.2s
  type: STRICT_DNS
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: _ai_ui_server
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 8003
          address:
            socket_address:
              address: 192.168.68.113
              port_value: 8003
- "@type": type.googleapis.com/envoy.config.cluster.v3.Cluster
  name: _monitor_server
  connect_timeout: 0.2s
  type: STRICT_DNS
  lb_policy: ROUND_ROBIN
  load_assignment:
    cluster_name: _monitor_server
    endpoints:
    - lb_endpoints:
      - endpoint:
          health_check_config:
            port_value: 9090
          address:
            socket_address:
              address: 192.168.68.113
              port_value: 9090