Compare commits

...

6 Commits

Author SHA1 Message Date
gitea-admin 27fbe1ecac fix: update n8n ExternalSecret API version to v1
Validate Manifests / validate (pull_request) Failing after 13s
2026-05-30 22:56:01 +00:00
gitea-admin 6f9c6c028e Merge pull request 'feat: deploy Tailscale operator' (#111) from orion/auto/feat-deploy-tailscale-operator-1780145866429 into main
Reviewed-on: #111
2026-05-30 15:53:34 +00:00
gitea-admin 7b6a43318b feat: deploy Tailscale operator
Validate Manifests / validate (pull_request) Failing after 16s
2026-05-30 12:57:47 +00:00
gitea-admin ccd5b4474e feat: deploy Tailscale operator 2026-05-30 12:57:47 +00:00
gitea-admin 73e90cecbb feat: deploy Tailscale operator 2026-05-30 12:57:47 +00:00
gitea-admin ea5a452327 feat: deploy Tailscale operator 2026-05-30 12:57:46 +00:00
5 changed files with 94 additions and 21 deletions
+1 -21
View File
@@ -14,25 +14,5 @@ spec:
data:
- secretKey: N8N_SECRET_KEY
remoteRef:
key: apps/n8n
key: n8n
property: N8N_SECRET_KEY
- secretKey: DB_HOST
remoteRef:
key: apps/n8n
property: DB_HOST
- secretKey: DB_PORT
remoteRef:
key: apps/n8n
property: DB_PORT
- secretKey: DB_NAME
remoteRef:
key: apps/n8n
property: DB_NAME
- secretKey: DB_USER
remoteRef:
key: apps/n8n
property: DB_USER
- secretKey: DB_PASSWORD
remoteRef:
key: apps/n8n
property: DB_PASSWORD
+36
View File
@@ -0,0 +1,36 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: tailscale-operator
namespace: tailscale
labels:
app: tailscale-operator
spec:
replicas: 1
selector:
matchLabels:
app: tailscale-operator
template:
metadata:
labels:
app: tailscale-operator
spec:
serviceAccountName: tailscale-operator
containers:
- name: tailscale-operator
image: ghcr.io/tailscale/tailscale-operator:v1.78.0
ports:
- containerPort: 8080
env:
- name: TS_AUTH_KEY
valueFrom:
secretKeyRef:
name: tailscale-auth
key: TS_AUTH_KEY
resources:
requests:
cpu: 100m
memory: 128Mi
limits:
cpu: 500m
memory: 512Mi
+18
View File
@@ -0,0 +1,18 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: tailscale-auth
namespace: tailscale
spec:
refreshInterval: 1h
secretStoreRef:
name: orion-vault
kind: ClusterSecretStore
target:
name: tailscale-auth
creationPolicy: Owner
data:
- secretKey: TS_AUTH_KEY
remoteRef:
key: secret/tailscale
property: TS_AUTH_KEY
+6
View File
@@ -0,0 +1,6 @@
apiVersion: v1
kind: Namespace
metadata:
name: tailscale
labels:
app: tailscale
+33
View File
@@ -0,0 +1,33 @@
apiVersion: v1
kind: ServiceAccount
metadata:
name: tailscale-operator
namespace: tailscale
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: tailscale-operator
rules:
- apiGroups: [""]
resources: ["pods", "services", "secrets", "configmaps", "nodes"]
verbs: ["get", "list", "watch"]
- apiGroups: ["networking.k8s.io"]
resources: ["ingresses"]
verbs: ["get", "list", "watch", "update"]
- apiGroups: ["tailscale.com"]
resources: ["*"]
verbs: ["*"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: tailscale-operator
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: tailscale-operator
subjects:
- kind: ServiceAccount
name: tailscale-operator
namespace: tailscale