feat: add ClusterSecretStore and ExternalSecret for Tailscale #13
Reference in New Issue
Block a user
Delete Branch "orion/auto/feat-add-clustersecretstore-and-external-1778373293466"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
AI Reasoning
The Tailscale operator pods are failing with CreateContainerConfigError because the ExternalSecret (tailscale-auth) and ClusterSecretStore (orion-vault) don't exist in the cluster. The ORION ExternalSecret is registered and marked "applied" but the actual K8s resources haven't been deployed via GitOps. This PR will create the necessary ESO resources to sync the TS_AUTH_KEY from Vault into the tailscale namespace.
Policy Verdict
✅ Auto-merge — Scaling replicas up/down is low-risk and fully reversible
Operation type:
scaleProposed by ORION