fix: update tailscale operator to use OAuth secret with correct namespace

tailscale/deployment.yaml

@@ -17,27 +17,31 @@ spec:
     spec:
       serviceAccountName: tailscale-operator
       containers:
-        - name: operator
+      - name: operator
-          image: ghcr.io/tailscale/k8s-operator:v1.78.3
+        image: ghcr.io/tailscale/k8s-operator:v1.78.3
-          env:
+        env:
-            - name: POD_NAME
+        - name: POD_NAME
-              valueFrom:
+          valueFrom:
-                fieldRef:
+            fieldRef:
-                  fieldPath: metadata.name
+              fieldPath: metadata.name
-            - name: POD_NAMESPACE
+        - name: POD_NAMESPACE
-              valueFrom:
+          valueFrom:
-                fieldRef:
+            fieldRef:
-                  fieldPath: metadata.namespace
+              fieldPath: metadata.namespace
-            - name: CLIENT_ID_FILE
+        - name: CLIENT_ID_FILE
-              value: /etc/tailscale/operator/client-id
+          value: "/var/run/secrets/tailscale/client-id"
-            - name: CLIENT_SECRET_FILE
+        - name: CLIENT_SECRET_FILE
-              value: /etc/tailscale/operator/client-secret
+          value: "/var/run/secrets/tailscale/client-secret"
-          volumeMounts:
+        volumeMounts:
-            - name: operator-secret
+        - name: tailscale-secret
-              mountPath: /etc/tailscale/operator
+          mountPath: /var/run/secrets/tailscale
-              readOnly: true
+          readOnly: true
-          resources: {}
       volumes:
-        - name: operator-secret
+      - name: tailscale-secret
-          secret:
+        secret:
-            secretName: tailscale-operator-secret
+          secretName: tailscale-operator-secret
+          items:
+          - key: CLIENT_ID_FILE
+            path: client-id
+          - key: CLIENT_SECRET_FILE
+            path: client-secret