From 2a92c5a371bbb646ef9941f8219e99b03fd01686 Mon Sep 17 00:00:00 2001
From: gitea-admin <admin@local>
Date: Sun, 10 May 2026 12:21:26 +0000
Subject: [PATCH] feat: deploy Tailscale Operator with auth secret

---
 deployments/tailscale/operator/clusterrole.yaml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 deployments/tailscale/operator/clusterrole.yaml

diff --git a/deployments/tailscale/operator/clusterrole.yaml b/deployments/tailscale/operator/clusterrole.yaml
new file mode 100644
index 0000000..a7782e3
--- /dev/null
+++ b/deployments/tailscale/operator/clusterrole.yaml
@@ -0,0 +1,17 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: tailscale-operator
+rules:
+  - apiGroups: [""]
+    resources: ["secrets", "configmaps", "services", "pods", "endpoints"]
+    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+  - apiGroups: ["apps"]
+    resources: ["deployments", "statefulsets", "daemonsets"]
+    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+  - apiGroups: ["networking.k8s.io"]
+    resources: ["ingresses"]
+    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+  - apiGroups: ["tailscale.com"]
+    resources: ["*"]
+    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]