Add rubenhensen.nl ingress hosts and ip-updater CronJob

2026-09-17 02:12:55 +02:00 · 2026-03-15 12:54:09 +01:00
parent c51c98e821
commit d47f6d3a2c
3 changed files with 78 additions and 0 deletions
@@ -0,0 +1,39 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: ip-updater
+spec:
+  schedule: "*/5 * * * *"
+  successfulJobsHistoryLimit: 1
+  failedJobsHistoryLimit: 3
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          containers:
+            - name: ip-updater
+              image: alpine:3.19
+              command: ["/bin/sh", "-c"]
+              args:
+                - |
+                  apk add --no-cache openssh-client curl > /dev/null 2>&1
+                  cp /ssh-key/private_key /tmp/ssh_key
+                  chmod 600 /tmp/ssh_key
+                  IP=$(curl -s --max-time 10 https://api.ipify.org)
+                  if [ -z "$IP" ]; then
+                    echo "Failed to get external IP"
+                    exit 1
+                  fi
+                  echo "Current external IP: $IP"
+                  ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null \
+                    -i /tmp/ssh_key root@46.224.26.65 "$IP"
+              volumeMounts:
+                - name: ssh-key
+                  mountPath: /ssh-key
+                  readOnly: true
+          volumes:
+            - name: ssh-key
+              secret:
+                secretName: ip-updater-ssh-key
+                defaultMode: 0400
+          restartPolicy: OnFailure
@@ -0,0 +1,17 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: ip-updater-ssh-key
+spec:
+  secretStoreRef:
+    name: vault-backend
+    kind: ClusterSecretStore
+  refreshInterval: 15m
+  target:
+    name: ip-updater-ssh-key
+    creationPolicy: Owner
+  data:
+    - secretKey: private_key
+      remoteRef:
+        key: kv/ip-updater
+        property: ssh_private_key