Add Headscale support (#243)

Author: majst01

deploy_control_plane.yaml

@@ -16,6 +16,8 @@
       tags: metal-db
     - name: metal-roles/control-plane/roles/ipam-db
       tags: ipam-db
+    - name: metal-roles/control-plane/roles/headscale
+      tags: headscale
     - name: metal-roles/control-plane/roles/masterdata-db
       tags: masterdata-db
     - name: metal-roles/control-plane/roles/auditing-timescaledb

inventories/group_vars/all/images.yaml

@@ -22,6 +22,11 @@ setup_yaml:
 # metal_console_image_tag:
 # metal_core_image_name:
 # metal_core_image_tag:
+# headscale_image_tag: v0.26.1
+# headscale_db_backup_restore_sidecar_image_tag: latest
+# headscale_db_backup_restore_sidecar_image_name: ghcr.io/metal-stack/backup-restore-sidecar
+# headscale_db_image_tag: 17-alpine
+# headscale_db_image_name: postgres
 # ...
 #
 

inventories/group_vars/control-plane/headscale.yaml

@@ -0,0 +1,13 @@
+---
+headscale_tls: no
+
+# only hexadecimal passwords are allowed and need to be prefixed with "privkey:"
+# should be 64 characters long
+headscale_private_key: privkey:38f1186d8c9d468379f1143282ae37f4259cb617b7aa52de223d90f605983c58
+headscale_noise_private_key: privkey:38f1186d8c9d468379f1143282ae37f4259cb617b7aa52de223d90f605983c58
+
+headscale_db_storage_size: 200Mi
+headscale_db_password: a-secure-password
+headscale_db_resources: {}
+
+headscale_ipv6_prefix: fd7a:115c:a1e0::/48

inventories/group_vars/control-plane/metal.yml

@@ -1,6 +1,7 @@
 ---
 metal_set_resource_limits: no
 metal_check_api_health_endpoint: http://api.{{ metal_control_plane_ingress_dns }}:8080/metal/v1/health
+metal_api_headscale_control_plane_address: "http://headscale.{{ metal_control_plane_ingress_dns }}:8080"
 
 # metal_helm_chart_local_path: /helm-charts/charts/metal-control-plane
 
@@ -162,3 +163,7 @@ metal_api_grpc_certs_ca_cert: "{{ lookup('file', 'certs/ca.pem') }}"
 
 # auditing
 metal_auditing_timescaledb_enabled: true
+
+# headscale
+metal_api_headscale_enabled: true
+metal_api_headscale_tls: no