Erich Blume
756f2dff13
The legacy per-Ingress StatefulSet proxy model silently ignores the tailscale.com/tags annotation, so tag:flyio-target was never applied to docs/loki/prometheus — breaking the restricted ACL. This adds a ProxyGroup (type: Ingress, 2 replicas) and annotates all 12 Ingresses with tailscale.com/proxy-group: "ingress" to enable per-Ingress tag overrides and restore connectivity. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| deployment.yaml | ||
| ingress-tailscale.yaml | ||
| kustomization.yaml | ||
| service.yaml | ||