tailscale/docs/k8s/role.yaml

# Copyright (c) Tailscale Inc & AUTHORS
# SPDX-License-Identifier: BSD-3-Clause
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: tailscale
rules:
- apiGroups: [""] # "" indicates the core API group
  resources: ["secrets"]
  # Create can not be restricted to a resource name.
  verbs: ["create"]
- apiGroups: [""] # "" indicates the core API group
  resourceNames: ["{{TS_KUBE_SECRET}}"]
  resources: ["secrets"]
  verbs: ["get", "update", "patch"]
all: update copyright and license headers This updates all source files to use a new standard header for copyright and license declaration. Notably, copyright no longer includes a date, and we now use the standard SPDX-License-Identifier header. This commit was done almost entirely mechanically with perl, and then some minimal manual fixes. Updates #6865 Signed-off-by: Will Norris <will@tailscale.com> 2 years ago			`# Copyright (c) Tailscale Inc & AUTHORS`
			`# SPDX-License-Identifier: BSD-3-Clause`
ipn/store: add ability to store data as k8s secrets. Signed-off-by: Maisem Ali <maisem@tailscale.com> 3 years ago			`apiVersion: rbac.authorization.k8s.io/v1`
			`kind: Role`
			`metadata:`
			`name: tailscale`
			`rules:`
			`- apiGroups: [""] # "" indicates the core API group`
			`resources: ["secrets"]`
docs/k8s: add instructions on how to run as a sidecar or a proxy. Signed-off-by: Maisem Ali <maisem@tailscale.com> 3 years ago			`# Create can not be restricted to a resource name.`
			`verbs: ["create"]`
			`- apiGroups: [""] # "" indicates the core API group`
build_docker.sh: add run.sh as an entrypoint to the docker image Fixes #4071 Signed-off-by: Maisem Ali <maisem@tailscale.com> 2 years ago			`resourceNames: ["{{TS_KUBE_SECRET}}"]`
docs/k8s: add instructions on how to run as a sidecar or a proxy. Signed-off-by: Maisem Ali <maisem@tailscale.com> 3 years ago			`resources: ["secrets"]`
docs/k8s: add secrets patching permission to the tailscale role. Fixes #6225. Signed-off-by: David Anderson <danderson@tailscale.com> 2 years ago			`verbs: ["get", "update", "patch"]`