adding tailscale

kubernetes/apps/tailscale/tailscale/cluster/connector.yaml

@@ -0,0 +1,14 @@
+---
+# yaml-language-server: $schema=https://ks.hsn.dev/tailscale.com/connector_v1alpha1.json
+apiVersion: tailscale.com/v1alpha1
+kind: Connector
+metadata:
+  name: connector
+spec:
+  hostname: theshire-connector
+  exitNode: true
+  proxyClass: kernel-org-tun
+  subnetRouter:
+    advertiseRoutes:
+      - "10.5.0.0/16" # load-balancers
+      - "10.4.0.0/16" # services

kubernetes/apps/tailscale/tailscale/cluster/kustomization.yaml

@@ -0,0 +1,7 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./connector.yaml
+  - ./proxyclass.yaml

kubernetes/apps/tailscale/tailscale/cluster/proxyclass.yaml

@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://ks.hsn.dev/tailscale.com/proxyclass_v1alpha1.json
 apiVersion: tailscale.com/v1alpha1
 kind: ProxyClass
 metadata:

kubernetes/apps/tailscale/tailscale/operator/externalsecret.yaml

@@ -10,6 +10,11 @@ spec:
     name: onepassword-connect
   target:
     name: k8s-operator-oauth-secret
+    template:
+      engineVersion: v2
+      data:
+        OAUTH_CLIENT_ID: "{{ .k8s-theshire-oauth-clientid }}"
+        OAUTH_CLIENT_SECRET: "{{ .k8s-theshire-oauth-clientsecret }}"
   dataFrom:
     - extract:
         key: k8s-operator-oauth

kubernetes/apps/tailscale/tailscale/operator/helmrelease.yaml

@@ -20,6 +20,15 @@ spec:
     crds: CreateReplace
   upgrade:
     crds: CreateReplace
+  valuesFrom:
+    - kind: Secret
+      name: k8s-operator-oauth-secret
+      valuesKey: OAUTH_CLIENT_ID
+      targetPath: oauth.clientId
+    - kind: Secret
+      name: k8s-operator-oauth-secret
+      valuesKey: OAUTH_CLIENT_SECRET
+      targetPath: oauth.clientSecret
   values:
     operatorConfig:
       defaultTags:

kubernetes/apps/tailscale/tailscale/operator/kustomization.yaml

@@ -0,0 +1,7 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./externalsecret.yaml
+  - ./helmrelease.yaml