feat: migrate tailscale operator to OAuth authentication
Validate Manifests / validate (pull_request) Has been cancelled

This commit is contained in:
2026-05-16 21:54:20 +00:00
parent 28f608f0a1
commit 742cdf485f
+2 -11
View File
@@ -19,7 +19,6 @@ spec:
containers: containers:
- name: operator - name: operator
image: ghcr.io/tailscale/k8s-operator:v1.78.3 image: ghcr.io/tailscale/k8s-operator:v1.78.3
imagePullPolicy: IfNotPresent
env: env:
- name: POD_NAME - name: POD_NAME
valueFrom: valueFrom:
@@ -30,23 +29,15 @@ spec:
fieldRef: fieldRef:
fieldPath: metadata.namespace fieldPath: metadata.namespace
- name: TS_CLIENT_ID_FILE - name: TS_CLIENT_ID_FILE
value: /etc/tailscale/oauth/client_id value: /etc/tailscale/oauth/client.id
- name: TS_CLIENT_SECRET_FILE - name: TS_CLIENT_SECRET_FILE
value: /etc/tailscale/oauth/client_secret value: /etc/tailscale/oauth/client.secret
volumeMounts: volumeMounts:
- name: oauth-secret - name: oauth-secret
mountPath: /etc/tailscale/oauth mountPath: /etc/tailscale/oauth
readOnly: true readOnly: true
resources: {} resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
terminationGracePeriodSeconds: 30
volumes: volumes:
- name: oauth-secret - name: oauth-secret
secret: secret:
secretName: tailscale-operator-secret secretName: tailscale-operator-secret
items:
- key: CLIENT_ID_FILE
path: client_id
- key: CLIENT_SECRET_FILE
path: client_secret