feat: migrate tailscale-operator to OAuth auth mode

2026-05-16 20:36:30 +00:00
parent 8ceed3a660
commit 5fd18fd952
1 changed files with 7 additions and 10 deletions
@@ -10,11 +10,6 @@ spec:
  selector:
    matchLabels:
      app: tailscale-operator
-  strategy:
-    rollingUpdate:
-      maxSurge: 25%
-      maxUnavailable: 25%
-    type: RollingUpdate
  template:
    metadata:
      labels:
@@ -29,17 +24,15 @@ spec:
        - name: POD_NAME
          valueFrom:
            fieldRef:
-              apiVersion: v1
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
-              apiVersion: v1
              fieldPath: metadata.namespace
        - name: TS_CLIENT_ID_FILE
-          value: /etc/tailscale/oauth/client-id
+          value: /etc/tailscale/oauth/client_id
        - name: TS_CLIENT_SECRET_FILE
-          value: /etc/tailscale/oauth/client-secret
+          value: /etc/tailscale/oauth/client_secret
        volumeMounts:
        - name: oauth-secret
          mountPath: /etc/tailscale/oauth
@@ -47,9 +40,13 @@ spec:
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
-      dnsPolicy: ClusterFirst
      terminationGracePeriodSeconds: 30
      volumes:
      - name: oauth-secret
        secret:
          secretName: tailscale-operator-secret
+          items:
+          - key: CLIENT_ID_FILE
+            path: client_id
+          - key: CLIENT_SECRET_FILE
+            path: client_secret