Add tailscale

charts/tailscale/Chart.yaml

@@ -0,0 +1,5 @@
+apiVersion: v2
+name: tailscale-config
+description: Tailscale operator ExternalSecret for OAuth credentials
+type: application
+version: 0.1.0

charts/tailscale/templates/external-secret.yaml

@@ -0,0 +1,25 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: operator-oauth
+  namespace: tailscale
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: aws-secrets-manager
+    kind: ClusterSecretStore
+  target:
+    name: operator-oauth
+    template:
+      data:
+        client_id: "{{ .client_id }}"
+        client_secret: "{{ .client_secret }}"
+  data:
+    - secretKey: client_id
+      remoteRef:
+        key: dumpnet
+        property: tailscale.oauth_client_id
+    - secretKey: client_secret
+      remoteRef:
+        key: dumpnet
+        property: tailscale.oauth_client_secret

charts/tailscale/values.yaml

@@ -0,0 +1,5 @@
+# Leave oauth block empty - operator uses precreated 'operator-oauth' secret
+# created by ExternalSecret in charts/tailscale/templates/
+oauth:
+  clientId: ""
+  clientSecret: ""