feat: deploy Tailscale Operator for remote cluster access

2026-05-09 19:03:18 +00:00
parent cb1b83907b
commit b0042e5510
1 changed files with 48 additions and 0 deletions
@@ -0,0 +1,48 @@
 apiVersion: v1
 kind: ServiceAccount
 metadata:
  name: tailscale-operator
  namespace: tailscale
  labels:
    app.kubernetes.io/name: tailscale
    app.kubernetes.io/component: operator
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
  name: tailscale-operator
  labels:
    app.kubernetes.io/name: tailscale
    app.kubernetes.io/component: operator
 rules:
 - apiGroups: ['']
  resources: ['secrets', 'services', 'endpoints']
  verbs: ['get', 'list', 'watch', 'create', 'update', 'patch', 'delete']
 - apiGroups: ['']
  resources: ['nodes']
  verbs: ['get', 'list', 'update', 'patch']
 - apiGroups: ['apps']
  resources: ['daemonsets']
  verbs: ['get', 'list', 'watch']
 - apiGroups: ['tailscale.com']
  resources: ['*']
  verbs: ['get', 'list', 'watch', 'create', 'update', 'patch', 'delete']
 - apiGroups: ['coordination.k8s.io']
  resources: ['leases']
  verbs: ['get', 'create', 'update']
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
  name: tailscale-operator
  labels:
    app.kubernetes.io/name: tailscale
    app.kubernetes.io/component: operator
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: tailscale-operator
 subjects:
 - kind: ServiceAccount
  name: tailscale-operator
  namespace: tailscale