Add tailscale

charts/tailscale/Chart.yaml

@@ -0,0 +1,5 @@
+apiVersion: v2
+name: tailscale-config
+description: Tailscale operator ExternalSecret for OAuth credentials
+type: application
+version: 0.1.0

charts/tailscale/templates/external-secret.yaml

@@ -0,0 +1,25 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: operator-oauth
+  namespace: tailscale
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: aws-secrets-manager
+    kind: ClusterSecretStore
+  target:
+    name: operator-oauth
+    template:
+      data:
+        client_id: "{{ .client_id }}"
+        client_secret: "{{ .client_secret }}"
+  data:
+    - secretKey: client_id
+      remoteRef:
+        key: dumpnet
+        property: tailscale.oauth_client_id
+    - secretKey: client_secret
+      remoteRef:
+        key: dumpnet
+        property: tailscale.oauth_client_secret

charts/tailscale/values.yaml

@@ -0,0 +1,5 @@
+# Leave oauth block empty - operator uses precreated 'operator-oauth' secret
+# created by ExternalSecret in charts/tailscale/templates/
+oauth:
+  clientId: ""
+  clientSecret: ""

manifests/cluster/tailscale.yaml

@@ -0,0 +1,30 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: tailscale
+  namespace: argocd
+spec:
+  project: default
+  sources:
+    - repoURL: https://forge.keane.sh/ian/dumpnet-argo.git
+      targetRevision: HEAD
+      ref: values
+    - repoURL: https://pkgs.tailscale.com/helmcharts
+      chart: tailscale-operator
+      targetRevision: "*"
+      helm:
+        valueFiles:
+          - $values/charts/tailscale/values.yaml
+    - repoURL: https://forge.keane.sh/ian/dumpnet-argo.git
+      targetRevision: HEAD
+      path: charts/tailscale
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: tailscale
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - ServerSideApply=true