feat: migrate tailscale-operator to OAuth auth mode #33
@@ -10,11 +10,6 @@ spec:
|
|||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app: tailscale-operator
|
app: tailscale-operator
|
||||||
strategy:
|
|
||||||
rollingUpdate:
|
|
||||||
maxSurge: 25%
|
|
||||||
maxUnavailable: 25%
|
|
||||||
type: RollingUpdate
|
|
||||||
template:
|
template:
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
@@ -29,17 +24,15 @@ spec:
|
|||||||
- name: POD_NAME
|
- name: POD_NAME
|
||||||
valueFrom:
|
valueFrom:
|
||||||
fieldRef:
|
fieldRef:
|
||||||
apiVersion: v1
|
|
||||||
fieldPath: metadata.name
|
fieldPath: metadata.name
|
||||||
- name: POD_NAMESPACE
|
- name: POD_NAMESPACE
|
||||||
valueFrom:
|
valueFrom:
|
||||||
fieldRef:
|
fieldRef:
|
||||||
apiVersion: v1
|
|
||||||
fieldPath: metadata.namespace
|
fieldPath: metadata.namespace
|
||||||
- name: TS_CLIENT_ID_FILE
|
- name: TS_CLIENT_ID_FILE
|
||||||
value: /etc/tailscale/oauth/client-id
|
value: /etc/tailscale/oauth/client_id
|
||||||
- name: TS_CLIENT_SECRET_FILE
|
- name: TS_CLIENT_SECRET_FILE
|
||||||
value: /etc/tailscale/oauth/client-secret
|
value: /etc/tailscale/oauth/client_secret
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: oauth-secret
|
- name: oauth-secret
|
||||||
mountPath: /etc/tailscale/oauth
|
mountPath: /etc/tailscale/oauth
|
||||||
@@ -47,9 +40,13 @@ spec:
|
|||||||
resources: {}
|
resources: {}
|
||||||
terminationMessagePath: /dev/termination-log
|
terminationMessagePath: /dev/termination-log
|
||||||
terminationMessagePolicy: File
|
terminationMessagePolicy: File
|
||||||
dnsPolicy: ClusterFirst
|
|
||||||
terminationGracePeriodSeconds: 30
|
terminationGracePeriodSeconds: 30
|
||||||
volumes:
|
volumes:
|
||||||
- name: oauth-secret
|
- name: oauth-secret
|
||||||
secret:
|
secret:
|
||||||
secretName: tailscale-operator-secret
|
secretName: tailscale-operator-secret
|
||||||
|
items:
|
||||||
|
- key: CLIENT_ID_FILE
|
||||||
|
path: client_id
|
||||||
|
- key: CLIENT_SECRET_FILE
|
||||||
|
path: client_secret
|
||||||
|
|||||||
Reference in New Issue
Block a user