C1: mirror tailscale container locally for ringtail proxyclass #347

Merged
eblume merged 3 commits from mirror-tailscale-container into main 2026-05-06 06:50:42 -07:00
2 changed files with 9 additions and 0 deletions
Showing only changes of commit 3bc9990355 - Show all commits

C1: rewrite ringtail proxyclass image to local tailscale container

Adds a kustomize images: rewrite scoped to tailscale-operator-ringtail,
pointing docker.io/tailscale/tailscale at registry.ops.eblu.me's
v1.94.2-67af7a8-nix build. Indri's tailscale-operator overlay is
unchanged — it continues pulling upstream until the k3s migration
retires the indri minikube cluster.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Erich Blume 2026-05-06 06:42:58 -07:00

View file

@ -8,3 +8,11 @@ resources:
- ../tailscale-operator-base
- proxygroup-ingress.yaml
- external-secret.yaml
# Rewrite the proxyclass image to our local nix-built mirror.
# Scoped to ringtail only; indri's tailscale-operator/kustomization.yaml still
# pulls from upstream docker.io.
images:
- name: docker.io/tailscale/tailscale
newName: registry.ops.eblu.me/blumeops/tailscale
newTag: v1.94.2-67af7a8-nix

View file

@ -0,0 +1 @@
Add local nix container build for `tailscale` (`containers/tailscale/default.nix`) so ringtail's tailscale-operator ProxyClass proxy pods pull from the forge mirror instead of `docker.io/tailscale/tailscale`. Pinned at v1.94.2 to match `service-versions.yaml`. Indri's tailscale-operator continues to use upstream during the k8s-to-ringtail migration.