feat: migrate tailscale operator to OAuth authentication #35
@@ -19,7 +19,6 @@ spec:
|
||||
containers:
|
||||
- name: operator
|
||||
image: ghcr.io/tailscale/k8s-operator:v1.78.3
|
||||
imagePullPolicy: IfNotPresent
|
||||
env:
|
||||
- name: POD_NAME
|
||||
valueFrom:
|
||||
@@ -30,23 +29,15 @@ spec:
|
||||
fieldRef:
|
||||
fieldPath: metadata.namespace
|
||||
- name: TS_CLIENT_ID_FILE
|
||||
value: /etc/tailscale/oauth/client_id
|
||||
value: /etc/tailscale/oauth/client.id
|
||||
- name: TS_CLIENT_SECRET_FILE
|
||||
value: /etc/tailscale/oauth/client_secret
|
||||
value: /etc/tailscale/oauth/client.secret
|
||||
volumeMounts:
|
||||
- name: oauth-secret
|
||||
mountPath: /etc/tailscale/oauth
|
||||
readOnly: true
|
||||
resources: {}
|
||||
terminationMessagePath: /dev/termination-log
|
||||
terminationMessagePolicy: File
|
||||
terminationGracePeriodSeconds: 30
|
||||
volumes:
|
||||
- name: oauth-secret
|
||||
secret:
|
||||
secretName: tailscale-operator-secret
|
||||
items:
|
||||
- key: CLIENT_ID_FILE
|
||||
path: client_id
|
||||
- key: CLIENT_SECRET_FILE
|
||||
path: client_secret
|
||||
|
||||
Reference in New Issue
Block a user