feat: migrate tailscale-operator to OAuth auth mode

2026-05-16 21:57:29 +00:00
parent 406b643aaf
commit 7217c9c9bf
1 changed files with 22 additions and 23 deletions
@@ -17,27 +17,26 @@ spec:
    spec:
      serviceAccountName: tailscale-operator
      containers:
-      - name: operator
+        - name: operator
-        image: ghcr.io/tailscale/k8s-operator:v1.78.3
+          image: ghcr.io/tailscale/k8s-operator:v1.78.3
-        env:
+          env:
-        - name: POD_NAME
+            - name: POD_NAME
-          valueFrom:
+              valueFrom:
-            fieldRef:
+                fieldRef:
-              fieldPath: metadata.name
+                  fieldPath: metadata.name
-        - name: POD_NAMESPACE
+            - name: POD_NAMESPACE
-          valueFrom:
+              valueFrom:
-            fieldRef:
+                fieldRef:
-              fieldPath: metadata.namespace
+                  fieldPath: metadata.namespace
-        - name: TS_CLIENT_ID_FILE
+            - name: TS_CLIENT_ID_FILE
-          value: /etc/tailscale/oauth/client.id
+              value: "/etc/tailscale/oauth/client_id"
-        - name: TS_CLIENT_SECRET_FILE
+            - name: TS_CLIENT_SECRET_FILE
-          value: /etc/tailscale/oauth/client.secret
+              value: "/etc/tailscale/oauth/client_secret"
-        volumeMounts:
+          volumeMounts:
-        - name: oauth-secret
+            - name: oauth-secret
-          mountPath: /etc/tailscale/oauth
+              mountPath: /etc/tailscale/oauth
-          readOnly: true
+              readOnly: true
        resources: {}
      volumes:
-      - name: oauth-secret
+        - name: oauth-secret
-        secret:
+          secret:
-          secretName: tailscale-operator-secret
+            secretName: tailscale-operator-secret