From 742cdf485fafd6c1579654e73eceed57176c2c12 Mon Sep 17 00:00:00 2001
From: gitea-admin <admin@local>
Date: Sat, 16 May 2026 21:54:20 +0000
Subject: [PATCH] feat: migrate tailscale operator to OAuth authentication

---
 deployments/tailscale-operator/deployment.yaml | 13 ++-----------
 1 file changed, 2 insertions(+), 11 deletions(-)

diff --git a/deployments/tailscale-operator/deployment.yaml b/deployments/tailscale-operator/deployment.yaml
index 84a0c38..c8d28ab 100644
--- a/deployments/tailscale-operator/deployment.yaml
+++ b/deployments/tailscale-operator/deployment.yaml
@@ -19,7 +19,6 @@ spec:
       containers:
       - name: operator
         image: ghcr.io/tailscale/k8s-operator:v1.78.3
-        imagePullPolicy: IfNotPresent
         env:
         - name: POD_NAME
           valueFrom:
@@ -30,23 +29,15 @@ spec:
             fieldRef:
               fieldPath: metadata.namespace
         - name: TS_CLIENT_ID_FILE
-          value: /etc/tailscale/oauth/client_id
+          value: /etc/tailscale/oauth/client.id
         - name: TS_CLIENT_SECRET_FILE
-          value: /etc/tailscale/oauth/client_secret
+          value: /etc/tailscale/oauth/client.secret
         volumeMounts:
         - name: oauth-secret
           mountPath: /etc/tailscale/oauth
           readOnly: true
         resources: {}
-        terminationMessagePath: /dev/termination-log
-        terminationMessagePolicy: File
-      terminationGracePeriodSeconds: 30
       volumes:
       - name: oauth-secret
         secret:
           secretName: tailscale-operator-secret
-          items:
-          - key: CLIENT_ID_FILE
-            path: client_id
-          - key: CLIENT_SECRET_FILE
-            path: client_secret