tailscale/cmd/k8s-operator/deploy/chart/values.yaml

# Copyright (c) Tailscale Inc & AUTHORS
# SPDX-License-Identifier: BSD-3-Clause

# Operator oauth credentials. If set a Kubernetes Secret with the provided
# values will be created in the operator namespace. If unset a Secret named
# operator-oauth must be precreated.
# oauth:
#   clientId: ""
#   clientSecret: ""

operatorConfig:
  image:
    repo: tailscale/k8s-operator
    # Digest will be prioritized over tag. If neither are set appVersion will be
    # used.
    tag: ""
    digest: ""
  logging: "info"
  hostname: "tailscale-operator"
  nodeSelector:
    kubernetes.io/os: linux


# proxyConfig contains configuraton that will be applied to any ingress/egress
# proxies created by the operator.
# https://tailscale.com/kb/1236/kubernetes-operator/#cluster-ingress
# https://tailscale.com/kb/1236/kubernetes-operator/#cluster-egress
proxyConfig:
  image:
    repo: tailscale/tailscale
    # Digest will be prioritized over tag. If neither are set appVersion will be
    # used.
    tag: ""
    digest: ""
  # ACL tag that operator will tag proxies with. Operator must be made owner of
  # these tags
  # https://tailscale.com/kb/1236/kubernetes-operator/?q=operator#setting-up-the-kubernetes-operator
  defaultTags: tag:k8s
  firewallMode: auto

# apiServerProxyConfig allows to configure whether the operator should expose
# Kubernetes API server.
# https://tailscale.com/kb/1236/kubernetes-operator/#accessing-the-kubernetes-control-plane-using-an-api-server-proxy
apiServerProxyConfig:
  mode: "false" # "true", "false", "noauth"
cmd/k8s-operator: allow to install operator via helm (#9920) Initial helm manifests. Updates tailscale/tailscale#9222 Signed-off-by: Irbe Krumina <irbe@tailscale.com> Co-authored-by: Maisem Ali <maisem@tailscale.com> 8 months ago			`# Copyright (c) Tailscale Inc & AUTHORS`
			`# SPDX-License-Identifier: BSD-3-Clause`

			`# Operator oauth credentials. If set a Kubernetes Secret with the provided`
			`# values will be created in the operator namespace. If unset a Secret named`
			`# operator-oauth must be precreated.`
			`# oauth:`
			`# clientId: ""`
			`# clientSecret: ""`

			`operatorConfig:`
			`image:`
			`repo: tailscale/k8s-operator`
			`# Digest will be prioritized over tag. If neither are set appVersion will be`
			`# used.`
			`tag: ""`
			`digest: ""`
			`logging: "info"`
			`hostname: "tailscale-operator"`
			`nodeSelector:`
			`kubernetes.io/os: linux`


			`# proxyConfig contains configuraton that will be applied to any ingress/egress`
			`# proxies created by the operator.`
			`# https://tailscale.com/kb/1236/kubernetes-operator/#cluster-ingress`
			`# https://tailscale.com/kb/1236/kubernetes-operator/#cluster-egress`
			`proxyConfig:`
			`image:`
			`repo: tailscale/tailscale`
			`# Digest will be prioritized over tag. If neither are set appVersion will be`
			`# used.`
			`tag: ""`
			`digest: ""`
			`# ACL tag that operator will tag proxies with. Operator must be made owner of`
			`# these tags`
			`# https://tailscale.com/kb/1236/kubernetes-operator/?q=operator#setting-up-the-kubernetes-operator`
			`defaultTags: tag:k8s`
			`firewallMode: auto`

			`# apiServerProxyConfig allows to configure whether the operator should expose`
			`# Kubernetes API server.`
			`# https://tailscale.com/kb/1236/kubernetes-operator/#accessing-the-kubernetes-control-plane-using-an-api-server-proxy`
			`apiServerProxyConfig:`
			`mode: "false" # "true", "false", "noauth"`