feat: migrate tailscale-operator to OAuth auth mode #37
@@ -17,27 +17,26 @@ spec:
|
|||||||
spec:
|
spec:
|
||||||
serviceAccountName: tailscale-operator
|
serviceAccountName: tailscale-operator
|
||||||
containers:
|
containers:
|
||||||
- name: operator
|
- name: operator
|
||||||
image: ghcr.io/tailscale/k8s-operator:v1.78.3
|
image: ghcr.io/tailscale/k8s-operator:v1.78.3
|
||||||
env:
|
env:
|
||||||
- name: POD_NAME
|
- name: POD_NAME
|
||||||
valueFrom:
|
valueFrom:
|
||||||
fieldRef:
|
fieldRef:
|
||||||
fieldPath: metadata.name
|
fieldPath: metadata.name
|
||||||
- name: POD_NAMESPACE
|
- name: POD_NAMESPACE
|
||||||
valueFrom:
|
valueFrom:
|
||||||
fieldRef:
|
fieldRef:
|
||||||
fieldPath: metadata.namespace
|
fieldPath: metadata.namespace
|
||||||
- name: TS_CLIENT_ID_FILE
|
- name: TS_CLIENT_ID_FILE
|
||||||
value: /etc/tailscale/oauth/client.id
|
value: "/etc/tailscale/oauth/client_id"
|
||||||
- name: TS_CLIENT_SECRET_FILE
|
- name: TS_CLIENT_SECRET_FILE
|
||||||
value: /etc/tailscale/oauth/client.secret
|
value: "/etc/tailscale/oauth/client_secret"
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: oauth-secret
|
- name: oauth-secret
|
||||||
mountPath: /etc/tailscale/oauth
|
mountPath: /etc/tailscale/oauth
|
||||||
readOnly: true
|
readOnly: true
|
||||||
resources: {}
|
|
||||||
volumes:
|
volumes:
|
||||||
- name: oauth-secret
|
- name: oauth-secret
|
||||||
secret:
|
secret:
|
||||||
secretName: tailscale-operator-secret
|
secretName: tailscale-operator-secret
|
||||||
|
|||||||
Reference in New Issue
Block a user