mirror of https://github.com/tailscale/tailscale/
cmd/k8s-operator/deploy/examples: add an example of using Connector to configure exit node
Signed-off-by: Irbe Krumina <irbe@tailscale.com>irbekrm/containerbootdeclarativeconf
parent
f8fe1d9182
commit
015197c4da
@ -0,0 +1,19 @@
|
|||||||
|
# Before applying ensure that the operator owns tag:prod.
|
||||||
|
# https://tailscale.com/kb/1236/kubernetes-operator/#setting-up-the-kubernetes-operator.
|
||||||
|
# To set up autoapproval set tag:prod as approver for 10.40.0.0/14 route and exit node.
|
||||||
|
# Otherwise approve it manually in Machines panel once the
|
||||||
|
# ts-prod Tailscale node has been created.
|
||||||
|
# See https://tailscale.com/kb/1018/acls/#auto-approvers-for-routes-and-exit-nodes
|
||||||
|
apiVersion: tailscale.com/v1alpha1
|
||||||
|
kind: Connector
|
||||||
|
metadata:
|
||||||
|
name: prod
|
||||||
|
spec:
|
||||||
|
tags:
|
||||||
|
- "tag:prod"
|
||||||
|
hostname: ts-prod
|
||||||
|
subnetRouter:
|
||||||
|
routes:
|
||||||
|
- "10.40.0.0/14"
|
||||||
|
- "192.168.0.0/14"
|
||||||
|
exitNode: true
|
@ -1,17 +0,0 @@
|
|||||||
# Before applyong this ensure that the operator is owner of tag:subnet.
|
|
||||||
# https://tailscale.com/kb/1236/kubernetes-operator/#setting-up-the-kubernetes-operator.
|
|
||||||
# To set up autoapproval set tag:subnet as approver for 10.40.0.0/14 route
|
|
||||||
# otherwise you will need to approve it manually in control panel once the
|
|
||||||
# subnet router has been created.
|
|
||||||
# https://tailscale.com/kb/1019/subnets/#advertise-subnet-routes
|
|
||||||
apiVersion: tailscale.com/v1alpha1
|
|
||||||
kind: Connector
|
|
||||||
metadata:
|
|
||||||
name: exposepods
|
|
||||||
spec:
|
|
||||||
subnetRouter:
|
|
||||||
routes:
|
|
||||||
- "10.40.0.0/14"
|
|
||||||
tags:
|
|
||||||
- "tag:subnet"
|
|
||||||
hostname: pods-subnetrouter
|
|
Loading…
Reference in New Issue