|
|
@ -4,9 +4,9 @@
|
|
|
|
# Operator oauth credentials. If set a Kubernetes Secret with the provided
|
|
|
|
# Operator oauth credentials. If set a Kubernetes Secret with the provided
|
|
|
|
# values will be created in the operator namespace. If unset a Secret named
|
|
|
|
# values will be created in the operator namespace. If unset a Secret named
|
|
|
|
# operator-oauth must be precreated.
|
|
|
|
# operator-oauth must be precreated.
|
|
|
|
# oauth:
|
|
|
|
oauth: {}
|
|
|
|
# clientId: ""
|
|
|
|
# clientId: ""
|
|
|
|
# clientSecret: ""
|
|
|
|
# clientSecret: ""
|
|
|
|
|
|
|
|
|
|
|
|
operatorConfig:
|
|
|
|
operatorConfig:
|
|
|
|
image:
|
|
|
|
image:
|
|
|
@ -15,11 +15,23 @@ operatorConfig:
|
|
|
|
# used.
|
|
|
|
# used.
|
|
|
|
tag: ""
|
|
|
|
tag: ""
|
|
|
|
digest: ""
|
|
|
|
digest: ""
|
|
|
|
|
|
|
|
pullPolicy: Always
|
|
|
|
logging: "info"
|
|
|
|
logging: "info"
|
|
|
|
hostname: "tailscale-operator"
|
|
|
|
hostname: "tailscale-operator"
|
|
|
|
nodeSelector:
|
|
|
|
nodeSelector:
|
|
|
|
kubernetes.io/os: linux
|
|
|
|
kubernetes.io/os: linux
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
resources: {}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
podAnnotations: {}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
tolerations: []
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
affinity: {}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
podSecurityContext: {}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
securityContext: {}
|
|
|
|
|
|
|
|
|
|
|
|
# proxyConfig contains configuraton that will be applied to any ingress/egress
|
|
|
|
# proxyConfig contains configuraton that will be applied to any ingress/egress
|
|
|
|
# proxies created by the operator.
|
|
|
|
# proxies created by the operator.
|
|
|
@ -43,3 +55,5 @@ proxyConfig:
|
|
|
|
# https://tailscale.com/kb/1236/kubernetes-operator/#accessing-the-kubernetes-control-plane-using-an-api-server-proxy
|
|
|
|
# https://tailscale.com/kb/1236/kubernetes-operator/#accessing-the-kubernetes-control-plane-using-an-api-server-proxy
|
|
|
|
apiServerProxyConfig:
|
|
|
|
apiServerProxyConfig:
|
|
|
|
mode: "false" # "true", "false", "noauth"
|
|
|
|
mode: "false" # "true", "false", "noauth"
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
imagePullSecrets: []
|
|
|
|