summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorIrbe Krumina <irbe@tailscale.com>2025-04-22 10:53:58 +0100
committerIrbe Krumina <irbe@tailscale.com>2025-04-22 11:57:57 +0100
commit144a22ab2a9abe1ee592e2a3324b5c294ee9f4f0 (patch)
tree57923e1e4d8721dd5772de0b096916054af9f12b
parent7090f7fffc2c6ea67d0ff9e1adb582a6e87db468 (diff)
downloadtailscale-irbekrm/doc_tags.tar.xz
tailscale-irbekrm/doc_tags.zip
cmd/k8s-operator: clarify tag requirementsirbekrm/doc_tags
Updates tailscale/tailscale#15732 Signed-off-by: Irbe Krumina <irbe@tailscale.com>
-rw-r--r--cmd/k8s-operator/deploy/chart/values.yaml8
1 files changed, 4 insertions, 4 deletions
diff --git a/cmd/k8s-operator/deploy/chart/values.yaml b/cmd/k8s-operator/deploy/chart/values.yaml
index 2d1effc25..cc43482da 100644
--- a/cmd/k8s-operator/deploy/chart/values.yaml
+++ b/cmd/k8s-operator/deploy/chart/values.yaml
@@ -30,8 +30,8 @@ oauthSecretVolume: {}
installCRDs: true
operatorConfig:
- # ACL tag that operator will be tagged with. Operator must be made owner of
- # these tags
+ # ACL tags that operator's Tailscale device will be tagged with.
+ # These tags must be the exact same tags that the operator's OAuth client creds were tagged with.
# https://tailscale.com/kb/1236/kubernetes-operator/?q=operator#setting-up-the-kubernetes-operator
# Multiple tags are defined as array items and passed to the operator as a comma-separated string
defaultTags:
@@ -92,8 +92,8 @@ proxyConfig:
# used.
tag: ""
digest: ""
- # ACL tag that operator will tag proxies with. Operator must be made owner of
- # these tags
+ # ACL tags that operator will tag proxies with.
+ # These tags must be either the tags that the operator's OAuth client creds were tagged with or tags owned by those tags.
# https://tailscale.com/kb/1236/kubernetes-operator/?q=operator#setting-up-the-kubernetes-operator
# Multiple tags can be passed as a comma-separated string i.e 'tag:k8s-proxies,tag:prod'.
# Note that if you pass multiple tags to this field via `--set` flag to helm upgrade/install commands you must escape the comma (for example, "tag:k8s-proxies\,tag:prod"). See https://github.com/helm/helm/issues/1556