From af493fb72628b94d87c560e57fa5a02185c76be3 Mon Sep 17 00:00:00 2001
From: gitea-admin <admin@local>
Date: Sun, 10 May 2026 02:02:47 +0000
Subject: [PATCH] feat: deploy Tailscale Operator and auth secret

---
 deployments/tailscale/clusterrole.yaml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 deployments/tailscale/clusterrole.yaml

diff --git a/deployments/tailscale/clusterrole.yaml b/deployments/tailscale/clusterrole.yaml
new file mode 100644
index 0000000..ebad7cc
--- /dev/null
+++ b/deployments/tailscale/clusterrole.yaml
@@ -0,0 +1,19 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: tailscale-operator
+  labels:
+    app: tailscale-operator
+rules:
+- apiGroups: [""]
+  resources: ["pods", "services", "secrets", "configmaps"]
+  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+- apiGroups: ["apps"]
+  resources: ["deployments", "statefulsets"]
+  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+- apiGroups: ["discovery.k8s.io"]
+  resources: ["endpointslices"]
+  verbs: ["get", "list", "watch"]
+- apiGroups: ["coordination.k8s.io"]
+  resources: ["leases"]
+  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]