From 18afced6ba673f70a023d2f4fb9f542a7b292900 Mon Sep 17 00:00:00 2001 From: Rick Gardner Date: Fri, 27 Feb 2026 11:48:55 -0500 Subject: [PATCH 1/2] persisting app_sudo permissions for nebula sync --- clusters/hlcl1/apps/pihole/chart/helmrelease.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/clusters/hlcl1/apps/pihole/chart/helmrelease.yaml b/clusters/hlcl1/apps/pihole/chart/helmrelease.yaml index 15d22d0..afd898c 100644 --- a/clusters/hlcl1/apps/pihole/chart/helmrelease.yaml +++ b/clusters/hlcl1/apps/pihole/chart/helmrelease.yaml @@ -51,6 +51,8 @@ spec: extraEnvVars: TZ: "America/New_York" FTLCONF_webserver_port: "80" + # app_sudo is required on replicas for nebula-sync + FTLCONF_webserver_api_app_sudo: "true" resources: limits: cpu: 500m From 1245bcab9c47a09d77ab47fb85825eac027793f8 Mon Sep 17 00:00:00 2001 From: Richard S Gardner <8586577+rgardner4012@users.noreply.github.com> Date: Fri, 27 Feb 2026 11:58:46 -0500 Subject: [PATCH 2/2] Clarify we mean nebula replicas and not k8s replicas --- clusters/hlcl1/apps/pihole/chart/helmrelease.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/clusters/hlcl1/apps/pihole/chart/helmrelease.yaml b/clusters/hlcl1/apps/pihole/chart/helmrelease.yaml index afd898c..ebd36b4 100644 --- a/clusters/hlcl1/apps/pihole/chart/helmrelease.yaml +++ b/clusters/hlcl1/apps/pihole/chart/helmrelease.yaml @@ -51,7 +51,7 @@ spec: extraEnvVars: TZ: "America/New_York" FTLCONF_webserver_port: "80" - # app_sudo is required on replicas for nebula-sync + # app_sudo is required on all nebula replicas for nebula-sync FTLCONF_webserver_api_app_sudo: "true" resources: limits: