feat: migrate tailscale-operator to OAuth auth mode

deployments/tailscale-operator/deployment.yaml

@@ -1,10 +1,10 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: tailscale-operator
-  namespace: tailscale
   labels:
     app: tailscale-operator
+  name: tailscale-operator
+  namespace: tailscale
 spec:
   replicas: 1
   selector:
@@ -17,26 +17,39 @@ spec:
     spec:
       serviceAccountName: tailscale-operator
       containers:
-      - name: operator
+        - name: operator
-        image: ghcr.io/tailscale/k8s-operator:v1.78.3
+          image: ghcr.io/tailscale/k8s-operator:v1.78.3
-        env:
+          imagePullPolicy: IfNotPresent
-        - name: POD_NAME
+          env:
-          valueFrom:
+            - name: POD_NAME
-            fieldRef:
+              valueFrom:
-              fieldPath: metadata.name
+                fieldRef:
-        - name: POD_NAMESPACE
+                  apiVersion: v1
-          valueFrom:
+                  fieldPath: metadata.name
-            fieldRef:
+            - name: POD_NAMESPACE
-              fieldPath: metadata.namespace
+              valueFrom:
-        - name: TS_CLIENT_ID_FILE
+                fieldRef:
-          value: /etc/tailscale/oauth/client-id
+                  apiVersion: v1
-        - name: TS_CLIENT_SECRET_FILE
+                  fieldPath: metadata.namespace
-          value: /etc/tailscale/oauth/client-secret
+            - name: TS_CLIENT_ID_FILE
-        volumeMounts:
+              value: /etc/tailscale/oauth/client-id
-        - name: oauth-secret
+            - name: TS_CLIENT_SECRET_FILE
-          mountPath: /etc/tailscale/oauth
+              value: /etc/tailscale/oauth/client-secret
-          readOnly: true
+          volumeMounts:
+            - name: oauth-secret
+              mountPath: /etc/tailscale/oauth
+              readOnly: true
+          resources: {}
+          terminationMessagePath: /dev/termination-log
+          terminationMessagePolicy: File
       volumes:
-      - name: oauth-secret
+        - name: oauth-secret
-        secret:
+          secret:
-          secretName: tailscale-operator-secret
+            secretName: tailscale-operator-secret
+            defaultMode: 0600
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      terminationGracePeriodSeconds: 30
+      schedulerName: default
+      securityContext: {}
+      terminationGracePeriodSeconds: 30