Deploy Tailscale operator on ringtail k3s cluster #215

Merged

eblume merged 2 commits from tailscale-operator-ringtail into main

2026-02-19 09:33:06 -08:00

Author	SHA1	Message	Date
Erich Blume	f028efbdf9	Allow k8s-operator OAuth client to self-assign tag:k8s-operator The tagOwners for tag:k8s-operator didn't include tag:k8s-operator itself, so the OAuth client (tagged tag:k8s-operator) couldn't create auth keys for its own tag. Indri worked only due to cached login state. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-19 09:32:13 -08:00
Erich Blume	d6c1806e39	Deploy Tailscale operator on ringtail k3s cluster Extract shared operator resources (CRDs, RBAC, Deployment, ProxyClass, DNSConfig) into tailscale-operator-base/ so both indri and ringtail reference the same base without duplication. Ringtail overlay adds a 1-replica ProxyGroup and ExternalSecret for the shared OAuth client. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-19 09:18:43 -08:00

Author

SHA1

Message

Date

Erich Blume

f028efbdf9

Allow k8s-operator OAuth client to self-assign tag:k8s-operator

The tagOwners for tag:k8s-operator didn't include tag:k8s-operator
itself, so the OAuth client (tagged tag:k8s-operator) couldn't create
auth keys for its own tag. Indri worked only due to cached login state.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-19 09:32:13 -08:00

Erich Blume

d6c1806e39

Deploy Tailscale operator on ringtail k3s cluster

Extract shared operator resources (CRDs, RBAC, Deployment, ProxyClass,
DNSConfig) into tailscale-operator-base/ so both indri and ringtail
reference the same base without duplication. Ringtail overlay adds a
1-replica ProxyGroup and ExternalSecret for the shared OAuth client.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-19 09:18:43 -08:00