update

infra/nebula-sync/templates/deployment.yaml

@@ -15,70 +15,59 @@ spec:
       labels:
         app: nebula-sync
     spec:
-      volumes:
-      - name: nebula-sync-configmap
-        configMap: 
-          name: nebula-sync-configmap
-          items:
-            - key: .env
-              path: .env
       containers:
       - name: nebula-sync
         image: registry.durp.info/lovelaze/nebula-sync:latest
         imagePullPolicy: Always
-        volumeMounts:
-        - mountPath: /app
-          name: .env
         env:
           - name: PRIMARY
             valueFrom:
               secretKeyRef:
                 name: nebula-sync-secret
-                key: ADMIN_TOKEN
+                key: primary
           - name: REPLICAS
             valueFrom:
               secretKeyRef:
                 name: nebula-sync-secret
-                key: ADMIN_TOKEN
+                key: replicas
-
           - name: FULL_SYNC
-            value: false
+            value: "false"
           - name: RUN_GRAVITY
-            value: false
+            value: "false"
           - name: CRON
             value: "*/15 * * * *"
           - name: CLIENT_SKIP_TLS_VERIFICATION
-            value: true
+            value: "true"
           - name: TZ
             value: America/Chicago
           - name: SYNC_CONFIG_DNS
-            value: true
+            value: "true"
           - name: SYNC_CONFIG_DHCP
-            value: true
+            value: "true"
           - name: SYNC_CONFIG_NTP
-            value: true
+            value: "true"
           - name: SYNC_CONFIG_RESOLVER
-            value: true
+            value: "true"
           - name: SYNC_CONFIG_DATABASE
-            value: true
+            value: "true"
           - name: SYNC_CONFIG_MISC
-            value: true
+            value: "true"
           - name: SYNC_CONFIG_DEBUG
-            value: true
+            value: "true"
           - name: SYNC_GRAVITY_DHCP_LEASES
-            value: true
+            value: "true"
           - name: SYNC_GRAVITY_GROUP
-            value: true
+            value: "true"
           - name: SYNC_GRAVITY_AD_LIST
-            value: true
+            value: "true"
           - name: SYNC_GRAVITY_AD_LIST_BY_GROUP
-            value: true
+            value: "true"
           - name: SYNC_GRAVITY_DOMAIN_LIST
-            value: true
+            value: "true"
           - name: SYNC_GRAVITY_DOMAIN_LIST_BY_GROUP
-            value: true
+            value: "true"
           - name: SYNC_GRAVITY_CLIENT
-            value: true
+            value: "true"
           - name: SYNC_GRAVITY_CLIENT_BY_GROUP
-            value: true
+            value: "true"
 

infra/nebula-sync/templates/secrets.yaml

@@ -1,13 +1,13 @@
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
-  name: nebula-secret
+  name: nebula-sync-secret
 spec:
   secretStoreRef:
     name: vault
     kind: ClusterSecretStore
   target:
-    name: nebula-secret
+    name: nebula-sync-secret
   data:
   - secretKey: primary
     remoteRef: