fix: migrate tailscale-operator to OAuth auth mode

Merge pull request 'fix: add OAuth config to tailscale-operator deployment' (#38 ) from orion/auto/fix-add-oauth-config-to-tailscale-operat-1778977929419 into main
Reviewed-on: #38
2026-05-17 00:46:03 +00:00 · 2026-05-17 00:32:28 +00:00 · 2026-05-17 00:32:09 +00:00 · 2026-05-17 00:27:14 +00:00 · 2026-05-16 21:57:29 +00:00 · 2026-05-16 21:56:37 +00:00
4 changed files with 146 additions and 5 deletions
@@ -0,0 +1,53 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: tailscale-operator
+  namespace: tailscale
+  labels:
+    app: tailscale-operator
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: tailscale-operator
+  template:
+    metadata:
+      labels:
+        app: tailscale-operator
+    spec:
+      serviceAccountName: tailscale-operator
+      containers:
+      - name: operator
+        image: ghcr.io/tailscale/k8s-operator:v1.78.3
+        imagePullPolicy: IfNotPresent
+        env:
+        - name: POD_NAME
+          valueFrom:
+            fieldRef:
+              apiVersion: v1
+              fieldPath: metadata.name
+        - name: POD_NAMESPACE
+          valueFrom:
+            fieldRef:
+              apiVersion: v1
+              fieldPath: metadata.namespace
+        - name: TS_CLIENT_ID_FILE
+          value: /etc/tailscale/oauth/client.id
+        - name: TS_CLIENT_SECRET_FILE
+          value: /etc/tailscale/oauth/client.secret
+        volumeMounts:
+        - name: oauth-secret
+          mountPath: /etc/tailscale/oauth
+          readOnly: true
+        resources: {}
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+      volumes:
+      - name: oauth-secret
+        secret:
+          secretName: tailscale-operator-secret
+          items:
+          - key: client.id
+            path: client.id
+          - key: client.secret
+            path: client.secret
@@ -23,13 +23,22 @@ spec:
        - name: POD_NAME
          valueFrom:
            fieldRef:
+              apiVersion: v1
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
+              apiVersion: v1
              fieldPath: metadata.namespace
-        - name: TS_AUTH_KEY
-          valueFrom:
-            secretKeyRef:
-              name: tailscale-auth
-              key: TS_AUTH_KEY
+        - name: TS_CLIENT_ID_FILE
+          value: /etc/tailscale/oauth/client-id
+        - name: TS_CLIENT_SECRET_FILE
+          value: /etc/tailscale/oauth/client-secret
+        volumeMounts:
+        - name: oauth-secret
+          mountPath: /etc/tailscale/oauth
+          readOnly: true
+      volumes:
+      - name: oauth-secret
+        secret:
+          secretName: tailscale-operator-secret
@@ -0,0 +1,37 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: tailscale-operator
+  namespace: tailscale
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: tailscale-operator
+  template:
+    metadata:
+      labels:
+        app: tailscale-operator
+    spec:
+      containers:
+      - name: operator
+        image: ghcr.io/tailscale/k8s-operator:latest
+        env:
+        - name: TS_K8S_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        - name: TS_K8S_SECRET
+          value: tailscale-operator-secret
+        - name: TS_CLIENT_ID_FILE
+          value: /etc/tailscale/oauth/client-id
+        - name: TS_CLIENT_SECRET_FILE
+          value: /etc/tailscale/oauth/client-secret
+        volumeMounts:
+        - name: oauth-secret
+          mountPath: /etc/tailscale/oauth
+          readOnly: true
+      volumes:
+      - name: oauth-secret
+        secret:
+          secretName: tailscale-operator-secret
@@ -0,0 +1,42 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: tailscale-operator
+  namespace: tailscale
+  labels:
+    app: tailscale-operator
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: tailscale-operator
+  template:
+    metadata:
+      labels:
+        app: tailscale-operator
+    spec:
+      serviceAccountName: tailscale-operator
+      containers:
+      - name: operator
+        image: ghcr.io/tailscale/k8s-operator:v1.78.3
+        env:
+        - name: POD_NAME
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.name
+        - name: POD_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        - name: TS_CLIENT_ID_FILE
+          value: /etc/tailscale/oauth/client-id
+        - name: TS_CLIENT_SECRET_FILE
+          value: /etc/tailscale/oauth/client-secret
+        volumeMounts:
+        - name: oauth-secret
+          mountPath: /etc/tailscale/oauth
+          readOnly: true
+      volumes:
+      - name: oauth-secret
+        secret:
+          secretName: tailscale-operator-secret
Author	SHA1	Message	Date
gitea-admin	89ff635940	fix: migrate tailscale-operator to OAuth auth mode Validate Manifests / validate (pull_request) Has been cancelled Details	2026-05-17 00:46:03 +00:00
gitea-admin	bf88086a3d	Merge pull request 'fix: add OAuth config to tailscale-operator deployment' (#38 ) from orion/auto/fix-add-oauth-config-to-tailscale-operat-1778977929419 into main Reviewed-on: #38	2026-05-17 00:32:28 +00:00
gitea-admin	df571132b7	fix: add OAuth config to tailscale-operator deployment Validate Manifests / validate (pull_request) Has been cancelled Details	2026-05-17 00:32:09 +00:00
gitea-admin	c4684fb0cf	Merge pull request 'feat: migrate tailscale-operator to OAuth auth mode' (#37 ) from orion/auto/feat-migrate-tailscale-operator-to-oauth-1778968649055 into main Reviewed-on: #37	2026-05-17 00:27:14 +00:00
gitea-admin	7217c9c9bf	feat: migrate tailscale-operator to OAuth auth mode Validate Manifests / validate (pull_request) Has been cancelled Details	2026-05-16 21:57:29 +00:00
gitea-admin	406b643aaf	Merge pull request 'fix: use OAuth auth mode for Tailscale operator' (#36 ) from orion/auto/fix-use-oauth-auth-mode-for-tailscale-op-1778968596436 into main Auto-merged by ORION: fix: use OAuth auth mode for Tailscale operator	2026-05-16 21:56:37 +00:00
gitea-admin	5cbb25af84	fix: use OAuth auth mode for Tailscale operator Validate Manifests / validate (pull_request) Has been cancelled Details	2026-05-16 21:56:36 +00:00
gitea-admin	efd3ccf0da	Merge pull request 'feat: migrate tailscale operator to OAuth authentication' (#35 ) from orion/auto/feat-migrate-tailscale-operator-to-oauth-1778968460695 into main Auto-merged by ORION: feat: migrate tailscale operator to OAuth authentication	2026-05-16 21:54:21 +00:00
gitea-admin	742cdf485f	feat: migrate tailscale operator to OAuth authentication Validate Manifests / validate (pull_request) Has been cancelled Details	2026-05-16 21:54:20 +00:00
gitea-admin	28f608f0a1	Merge pull request 'feat: migrate tailscale-operator to OAuth auth mode' (#34 ) from orion/auto/feat-migrate-tailscale-operator-to-oauth-1778966778432 into main Reviewed-on: #34	2026-05-16 21:26:32 +00:00
gitea-admin	6eaa4ea56f	feat: migrate tailscale-operator to OAuth auth mode Validate Manifests / validate (pull_request) Has been cancelled Details	2026-05-16 21:26:18 +00:00
gitea-admin	bdff8fa7f1	Merge pull request 'feat: migrate tailscale-operator to OAuth auth mode' (#33 ) from orion/auto/feat-migrate-tailscale-operator-to-oauth-1778963789752 into main Auto-merged by ORION: feat: migrate tailscale-operator to OAuth auth mode	2026-05-16 20:36:30 +00:00
gitea-admin	5fd18fd952	feat: migrate tailscale-operator to OAuth auth mode Validate Manifests / validate (pull_request) Has been cancelled Details	2026-05-16 20:36:30 +00:00
gitea-admin	8ceed3a660	Merge pull request 'feat: migrate tailscale-operator to OAuth authentication' (#32 ) from orion/auto/feat-migrate-tailscale-operator-to-oauth-1778962040728 into main Auto-merged by ORION: feat: migrate tailscale-operator to OAuth authentication	2026-05-16 20:07:21 +00:00
gitea-admin	088854fb98	feat: migrate tailscale-operator to OAuth authentication Validate Manifests / validate (pull_request) Has been cancelled Details	2026-05-16 20:07:20 +00:00
gitea-admin	5b3cd9145a	Merge pull request 'feat: migrate tailscale-operator to OAuth auth mode' (#30 ) from orion/auto/feat-migrate-tailscale-operator-to-oauth-1778958534086 into main Reviewed-on: #30	2026-05-16 19:09:07 +00:00
gitea-admin	0b4614f03b	feat: migrate tailscale-operator to OAuth auth mode Validate Manifests / validate (pull_request) Has been cancelled Details	2026-05-16 19:08:54 +00:00
gitea-admin	4803fb2acc	Merge pull request 'fix: update tailscale-operator to OAuth secrets mode' (#29 ) from orion/auto/fix-update-tailscale-operator-to-oauth-s-1778957203077 into main Reviewed-on: #29	2026-05-16 18:47:08 +00:00