values.yaml 5.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150
  1. registry_secret_data: ewoJImF1dGhzIjogewoJCSJqY3IuaW5mb2NsaW5pY2EucnUiOiB7CgkJCSJhdXRoIjogImNISnZkbWx6YVc5dU9tUmxiVzl6WlhKMlpYSWpjMlJ6TVRJeiIKCQl9Cgl9LAoJIkh0dHBIZWFkZXJzIjogewoJCSJVc2VyLUFnZW50IjogIkRvY2tlci1DbGllbnQvMTguMDkuOSAobGludXgpIgoJfQp9
  2. openvpn:
  3. image: "jcr.infoclinica.ru/iru/openvpn-gost"
  4. tag: "200518041"
  5. pullPolicy: IfNotPresent
  6. mode: server
  7. ccd_confdir: ccd
  8. # podAnnotations:
  9. resources:
  10. limits:
  11. cpu: 350m
  12. memory: 50Mi
  13. requests:
  14. cpu: 350m
  15. memory: 50Mi
  16. configuration: |-
  17. dev external
  18. dev-type tun
  19. port 1195
  20. proto tcp
  21. verb 3
  22. status /var/log/openvpn-external-status.log
  23. management localhost 7505
  24. keepalive 10 120
  25. persist-key
  26. persist-tun
  27. comp-lzo yes
  28. push comp-lzo yes
  29. topology subnet
  30. mssfix
  31. server 10.9.0.0 255.255.0.0
  32. push "route 5.200.59.165 255.255.255.255"
  33. push "route 192.168.200.0 255.255.248.0"
  34. push "route 192.168.205.0 255.255.255.0"
  35. push "route 10.1.116.0 255.255.255.0"
  36. push "route 217.74.42.71 255.255.255.255"
  37. route 192.168.206.0 255.255.255.0
  38. route 192.168.201.0 255.255.255.0
  39. route 192.168.21.0 255.255.255.0
  40. route 10.10.0.0 255.255.0.0
  41. crl-verify /etc/openvpn/keys/crl.pem
  42. client-config-dir /etc/openvpn/ccd
  43. ccd-exclusive
  44. engine cryptocom
  45. auth gost-mac
  46. cipher gost89
  47. tls-cipher GOST2012-GOST8912-GOST8912
  48. ca /etc/openvpn/keys/ca.crt
  49. cert /etc/openvpn/keys/server.crt
  50. key /etc/openvpn/keys/server.key
  51. keys:
  52. ca.crt: |-
  53. -----BEGIN CERTIFICATE-----
  54. MIICPzCCAeqgAwIBAgIJAL4mALec3gSvMAwGCCqFAwcBAQMCBQAwSTELMAkGA1UE
  55. BhMCUlUxDzANBgNVBAcTBk1vc2NvdzEOMAwGA1UEChMFU0RTeXMxGTAXBgNVBAMT
  56. EEVhc3ktR09TVCBDQSB2M2wwHhcNMjAwMzE4MDk1MTE2WhcNMjIwMzE4MDk1MTE2
  57. WjBJMQswCQYDVQQGEwJSVTEPMA0GA1UEBxMGTW9zY293MQ4wDAYDVQQKEwVTRFN5
  58. czEZMBcGA1UEAxMQRWFzeS1HT1NUIENBIHYzbDBmMB8GCCqFAwcBAQEBMBMGByqF
  59. AwICIwEGCCqFAwcBAQICA0MABEAllxmY+xR99A9iyEmgPb9mkm+Wm9jbYe2zOT0O
  60. tqhAREQUEJPaolixLvNxTxEsySyumqHDihrCD/LXTV9nUhnTo4GrMIGoMB0GA1Ud
  61. DgQWBBTf9pPnhQwwCC6VD+yCTkhWZpUWEDB5BgNVHSMEcjBwgBTf9pPnhQwwCC6V
  62. D+yCTkhWZpUWEKFNpEswSTELMAkGA1UEBhMCUlUxDzANBgNVBAcTBk1vc2NvdzEO
  63. MAwGA1UEChMFU0RTeXMxGTAXBgNVBAMTEEVhc3ktR09TVCBDQSB2M2yCCQC+JgC3
  64. nN4ErzAMBgNVHRMEBTADAQH/MAwGCCqFAwcBAQMCBQADQQBx4PZpxdGxFiA+3Dgs
  65. GUr4Urk8+jiQLbmknuD6vWUADO9A7VvMEEdZkWgml0/3Yt2qGs2ZZ56IMmkmwkM4
  66. Rozv
  67. -----END CERTIFICATE-----
  68. server.crt: |-
  69. -----BEGIN CERTIFICATE-----
  70. MIICWDCCAgOgAwIBAgIBbjAMBggqhQMHAQEDAgUAMEkxCzAJBgNVBAYTAlJVMQ8w
  71. DQYDVQQHEwZNb3Njb3cxDjAMBgNVBAoTBVNEU3lzMRkwFwYDVQQDExBFYXN5LUdP
  72. U1QgQ0EgdjNsMB4XDTIwMDUxNzEzMzQ1NFoXDTIxMDUxNzEzMzQ1NFowSzELMAkG
  73. A1UEBhMCUlUxDzANBgNVBAcTBk1vc2NvdzEOMAwGA1UEChMFU0RTeXMxCjAIBgNV
  74. BAsTATIxDzANBgNVBAMTBnNlcnZlcjBmMB8GCCqFAwcBAQEBMBMGByqFAwICIwEG
  75. CCqFAwcBAQICA0MABEDMynDvbv1HLKFmQc1gdSCzC3XiBZkczzYEG3cGMwe9pPwu
  76. +XfeErjCnI6L3dZ20bZR7Ad91bwXoUjOVZQnuY88o4HKMIHHMAkGA1UdEwQCMAAw
  77. HQYDVR0OBBYEFGtYB3CvKR0VqUQRWqmzqwPxFjJCMHkGA1UdIwRyMHCAFN/2k+eF
  78. DDAILpUP7IJOSFZmlRYQoU2kSzBJMQswCQYDVQQGEwJSVTEPMA0GA1UEBxMGTW9z
  79. Y293MQ4wDAYDVQQKEwVTRFN5czEZMBcGA1UEAxMQRWFzeS1HT1NUIENBIHYzbIIJ
  80. AL4mALec3gSvMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAsGA1UdDwQEAwIDiDAMBggq
  81. hQMHAQEDAgUAA0EAlDPHu4InFKvakuz70ISjgfYJddTbSMvnxGV9h9LCuOnyotML
  82. 2k6/NS/SXEnVm/zaF2i1bMsUlU1mBQX3sxGRqQ==
  83. -----END CERTIFICATE-----
  84. server.key: |-
  85. -----BEGIN PRIVATE KEY-----
  86. MIGAAgEAMB8GCCqFAwcBAQEBMBMGByqFAwICIwEGCCqFAwcBAQICBCCQsswQzpFL
  87. 7ecRbAKbTf8V5tZs8hMOnMDp486YomUsoaA4MDYGCCqFAwIJAwgBMSoEKAFsAU0p
  88. lsQAkisnUOguGeJ96UJQIXzPjpnm/WBFeECPYfeygjbUp10=
  89. -----END PRIVATE KEY-----
  90. crl.pem: |-
  91. -----BEGIN X509 CRL-----
  92. MIIBMTCB3TAMBggqhQMHAQEDAgUAMEkxCzAJBgNVBAYTAlJVMQ8wDQYDVQQHEwZN
  93. b3Njb3cxDjAMBgNVBAoTBVNEU3lzMRkwFwYDVQQDExBFYXN5LUdPU1QgQ0EgdjNs
  94. Fw0yMDAzMjMwODAyMDJaFw0zMDAzMjEwODAyMDJaMGQwEgIBIxcNMTkxMjI1MTEz
  95. MjQwWjASAgElFw0yMDAzMjMwODAyMDFaMBICASoXDTIwMDIyODE1NDA0MVowEgIB
  96. MRcNMjAwMzExMDk1NjQ2WjASAgFAFw0yMDAzMTkxMTI4MTVaMAwGCCqFAwcBAQMC
  97. BQADQQDsLtvVArTSNUu58siBrFJnIFneV17SB8RzvB/NFsmqlDYKAcC5YlSuPeX0
  98. 4NsLD/VSPLD1eJEZotycJgubXQhq
  99. -----END X509 CRL-----
  100. scripts:
  101. startscript.sh: |-
  102. _SERVERKEY_="MZCP-EU87-PNM9-E985"
  103. cp -r /tmp/server/.magprocryptopack /root
  104. chmod -R 700 /root/.magprocryptopack
  105. echo ${_SERVERKEY_} | /opt/cryptopack3/ssl/misc/getlicense.sh
  106. touch /tmp/lic
  107. mkdir /dev/net
  108. mknod /dev/net/tun c 10 200
  109. exec "/opt/openvpn-gost/sbin/openvpn" "--config" "/etc/openvpn/configuration/openvpn.conf"
  110. healthcheck.sh: |-
  111. #!/bin/bash
  112. update_lic() {
  113. /opt/cryptopack3/bin/updater -l /opt/cryptopack3/ssl/cryptocom.lic
  114. touch /tmp/lic
  115. }
  116. file=`find /tmp -name lic -type f -mtime +1`
  117. if [[ -z ${file} ]];then echo "Обновление лицензии не требуется"; else update_lic;fi
  118. # Inbound IP and port
  119. inbound_IP: 10.1.116.14
  120. inbound_port: 1195
  121. dev_name: external
  122. net: 10.9.0.0
  123. mask: 255.255.0.0
  124. ccd:
  125. client: ifconfig-push 10.9.10.2 255.255.0.0
  126. someclient: |-
  127. ifconfig-push 10.9.10.2 255.255.0.0
  128. iroute 192.168.250.0 255.255.255.0
  129. router:
  130. image: "jcr.infoclinica.ru/sdsys/kubectl"
  131. tag: "1.18.9-3"
  132. pullPolicy: IfNotPresent
  133. resources:
  134. limits:
  135. cpu: 50m
  136. memory: 50Mi
  137. requests:
  138. cpu: 50m
  139. memory: 50Mi