28 lines
941 B
TypeScript
28 lines
941 B
TypeScript
|
import * as pulumi from "@pulumi/pulumi";
|
||
|
|
import { VyosConfigTree } from "./vyosConfigTree";
|
||
|
|
|
||
|
|
const cfg = new pulumi.Config();
|
||
|
|
const host = cfg.get("host") ?? "172.31.1.252";
|
||
|
|
const apiKey = cfg.get("apiKey") ?? "labsim-proto-key";
|
||
|
|
|
||
|
|
// One subtree, one resource, one commit. This is the shape a BGP change would
|
||
|
|
// take: edit the commands array, `pulumi up`, and it lands as a single
|
||
|
|
// commit-confirmed transaction alongside whatever Kubernetes resources changed
|
||
|
|
// in the same plan.
|
||
|
|
const dnsForwarding = new VyosConfigTree("dns-forwarding", {
|
||
|
|
host, apiKey,
|
||
|
|
path: ["service", "dns", "forwarding"],
|
||
|
|
commands: [
|
||
|
|
["cache-size", "20000"],
|
||
|
|
["listen-address", "172.31.10.1"],
|
||
|
|
["allow-from", "172.31.10.0/23"],
|
||
|
|
["name-server", "8.8.8.8"],
|
||
|
|
["name-server", "8.8.4.4"],
|
||
|
|
["name-server", "1.1.1.1"],
|
||
|
|
],
|
||
|
|
confirmMinutes: 2,
|
||
|
|
save: true,
|
||
|
|
});
|
||
|
|
|
||
|
|
export const managed = dnsForwarding.id;
|