From 6eaa4ea56ff01d02418a2d8bb50b1475667a9d75 Mon Sep 17 00:00:00 2001
From: gitea-admin <admin@local>
Date: Sat, 16 May 2026 21:26:18 +0000
Subject: [PATCH] feat: migrate tailscale-operator to OAuth auth mode

---
 .../tailscale/operator/deployment.yaml        | 19 ++++++++++++++-----
 1 file changed, 14 insertions(+), 5 deletions(-)

diff --git a/deployments/tailscale/operator/deployment.yaml b/deployments/tailscale/operator/deployment.yaml
index e3fc711..0e2c87d 100644
--- a/deployments/tailscale/operator/deployment.yaml
+++ b/deployments/tailscale/operator/deployment.yaml
@@ -23,13 +23,22 @@ spec:
         - name: POD_NAME
           valueFrom:
             fieldRef:
+              apiVersion: v1
               fieldPath: metadata.name
         - name: POD_NAMESPACE
           valueFrom:
             fieldRef:
+              apiVersion: v1
               fieldPath: metadata.namespace
-        - name: TS_AUTH_KEY
-          valueFrom:
-            secretKeyRef:
-              name: tailscale-auth
-              key: TS_AUTH_KEY
\ No newline at end of file
+        - name: TS_CLIENT_ID_FILE
+          value: /etc/tailscale/oauth/client-id
+        - name: TS_CLIENT_SECRET_FILE
+          value: /etc/tailscale/oauth/client-secret
+        volumeMounts:
+        - name: oauth-secret
+          mountPath: /etc/tailscale/oauth
+          readOnly: true
+      volumes:
+      - name: oauth-secret
+        secret:
+          secretName: tailscale-operator-secret
-- 
2.52.0