tailscale helm

No introduction found. Create it?

Install

Install with:

helm repo add bjw-s oci://ghcr.io/bjw-s/helm/
helm install tailscale bjw-s/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (3 out of 13)

NameRepoStarsVersionTimestamp
tailscaleharaldkoch/kochhaus-home1143.5.1a day ago
tailscalejoryirving/home-ops1333.5.14 days ago
tailscaleburoa/k8s-gitops1693.5.15 days ago

Values

See the most popular values for this chart:

KeyTypes
controllers.tailscale.containers.app.env.TS_EXTRA_ARGS (10)
--advertise-exit-node
string
controllers.tailscale.containers.app.env.TS_USERSPACE (10)
true
boolean, string
controllers.tailscale.containers.app.env.TZ (10)
${TIMEZONE}
string
controllers.tailscale.containers.app.env.NO_AUTOUPDATE (9)
true
boolean
controllers.tailscale.containers.app.env.TS_STATE_DIR (9)
/tmp
string
controllers.tailscale.containers.app.env.TS_ROUTES (8)
${NODE_CIDR},${TRUSTED_LVAN}
string
controllers.tailscale.containers.app.env.TS_TAILSCALED_EXTRA_ARGS (7)
--debug=0.0.0.0:9001
string
controllers.tailscale.containers.app.env.PORT (6)
${TAILNET_PUBLIC_PORT:=1}
string, number
controllers.tailscale.containers.app.env.SA_NAME (4)
tailscale
string
controllers.tailscale.containers.app.env.TS_HOSTNAME.valueFrom.fieldRef.fieldPath (4)
metadata.name
string
controllers.tailscale.containers.app.env.TS_HOSTNAME (4)
tailscale-utility
string
controllers.tailscale.containers.app.env.TS_KUBE_SECRET (4)
tailscale-auth
string
controllers.tailscale.containers.app.env.TS_ACCEPT_DNS (2)
false
boolean
controllers.tailscale.containers.app.envFrom[].secretRef.name (10)
tailscale-secret
string
controllers.tailscale.containers.app.image.repository (10)
ghcr.io/tailscale/tailscale
string
controllers.tailscale.containers.app.image.tag (10)
v1.76.1@sha256:51d9f5f8543670ecd6b15363977876a876ac591ea45cc6adfc0bb2d07e487810
string
controllers.tailscale.containers.app.securityContext.allowPrivilegeEscalation (9)
false
boolean
controllers.tailscale.containers.app.securityContext.capabilities.drop[] (9)
- ALL
string
controllers.tailscale.containers.app.securityContext.readOnlyRootFilesystem (9)
true
boolean
controllers.tailscale.containers.app.resources.limits.memory (8)
256Mi
string
controllers.tailscale.containers.app.resources.requests.cpu (8)
10m
string
controllers.tailscale.containers.app.resources.requests.memory (3)
50Mi
string
controllers.tailscale.containers.app.probes.liveness.enabled (3)
true
boolean
controllers.tailscale.containers.app.probes.liveness.custom (2)
true
boolean
controllers.tailscale.containers.app.probes.liveness.spec.failureThreshold (2)
3
number
controllers.tailscale.containers.app.probes.liveness.spec.httpGet.path (2)
/debug/pprof/
string
controllers.tailscale.containers.app.probes.liveness.spec.httpGet.port (2)
9001
number
controllers.tailscale.containers.app.probes.liveness.spec.initialDelaySeconds (2)
15
number
controllers.tailscale.containers.app.probes.liveness.spec.periodSeconds (2)
20
number
controllers.tailscale.containers.app.probes.liveness.spec.timeoutSeconds (2)
1
number
controllers.tailscale.containers.app.probes.readiness.enabled (3)
true
boolean
controllers.tailscale.containers.app.probes.readiness.custom (2)
true
boolean
controllers.tailscale.containers.app.probes.readiness.spec.failureThreshold (2)
3
number
controllers.tailscale.containers.app.probes.readiness.spec.httpGet.path (2)
/debug/pprof/
string
controllers.tailscale.containers.app.probes.readiness.spec.httpGet.port (2)
9001
number
controllers.tailscale.containers.app.probes.readiness.spec.initialDelaySeconds (2)
15
number
controllers.tailscale.containers.app.probes.readiness.spec.periodSeconds (2)
20
number
controllers.tailscale.containers.app.probes.readiness.spec.timeoutSeconds (2)
1
number
controllers.tailscale.containers.app.probes.startup.enabled (1)
false
boolean
controllers.tailscale.containers.app.nameOverride (1)
tailscale
string
controllers.tailscale.annotations."reloader.stakater.com/auto" (9)
true
string
controllers.tailscale.strategy (7)
RollingUpdate
string
controllers.tailscale.replicas (5)
2
number
controllers.tailscale.pod.securityContext.runAsGroup (2)
568
number
controllers.tailscale.pod.securityContext.runAsNonRoot (2)
true
boolean
controllers.tailscale.pod.securityContext.runAsUser (2)
568
number
controllers.tailscale.pod.annotations.setGateway (1)
true
string
controllers.main.containers.main.env.TS_EXTRA_ARGS (3)
--advertise-tags=tag:servers
string
controllers.main.containers.main.env.TS_KUBE_SECRET (3)

string
controllers.main.containers.main.env.TS_ROUTES (3)
192.168.29.0/24,192.168.30.0/24
string
controllers.main.containers.main.env.TS_USERSPACE (3)
true
boolean, string
controllers.main.containers.main.env.TZ (2)
${TZ}
string
controllers.main.containers.main.env.NO_AUTOUPDATE (1)
true
boolean
controllers.main.containers.main.env.PORT (1)
45387
number
controllers.main.containers.main.env.SA_NAME (1)
tailscale
string
controllers.main.containers.main.env.TS_AUTHKEY.valueFrom.secretKeyRef.key (1)
TS_AUTHKEY
string
controllers.main.containers.main.env.TS_AUTHKEY.valueFrom.secretKeyRef.name (1)
tailscale-auth-1
string
controllers.main.containers.main.env.TS_TAILSCALED_EXTRA_ARGS (1)
--debug=0.0.0.0:2000
string
controllers.main.containers.main.image.repository (3)
ghcr.io/tailscale/tailscale
string
controllers.main.containers.main.image.tag (3)
v1.76.1
string
controllers.main.containers.main.envFrom[].secretRef.name (2)
tailscale
string
controllers.main.containers.main.probes.liveness.enabled (2)
true
boolean
controllers.main.containers.main.probes.readiness.enabled (2)
true
boolean
controllers.main.containers.main.probes.startup.enabled (1)
false
boolean
controllers.main.containers.main.resources.limits.memory (1)
256M
string
controllers.main.containers.main.resources.requests.cpu (1)
5m
string
controllers.main.containers.main.resources.requests.memory (1)
128M
string
controllers.main.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.main.pod.securityContext.runAsGroup (1)
568
number
controllers.main.pod.securityContext.runAsUser (1)
568
number
controllers.main.replicas (1)
2
number
controllers.main.strategy (1)
RollingUpdate
string
controllers.secondary.containers.main.env.TS_AUTHKEY.valueFrom.secretKeyRef.key (1)
TS_AUTHKEY
string
controllers.secondary.containers.main.env.TS_AUTHKEY.valueFrom.secretKeyRef.name (1)
tailscale-auth-2
string
controllers.secondary.containers.main.env.TS_EXTRA_ARGS (1)
--advertise-tags=tag:k8s-operator
string
controllers.secondary.containers.main.env.TS_KUBE_SECRET (1)
tailscale-state-2
string
controllers.secondary.containers.main.env.TS_ROUTES (1)
10.43.100.100/32
string
controllers.secondary.containers.main.env.TS_USERSPACE (1)
true
string
controllers.secondary.containers.main.image.repository (1)
ghcr.io/tailscale/tailscale
string
controllers.secondary.containers.main.image.tag (1)
v1.66.4
string
controllers.secondary.enabled (1)
true
boolean
persistence.cache.globalMounts[].path (9)
/.cache
string
persistence.cache.type (9)
emptyDir
string
persistence.cache.enabled (1)
true
boolean
persistence.tmp.type (9)
emptyDir
string
persistence.tmp.globalMounts[].path (8)
/tmp
string
persistence.tmp.enabled (1)
true
boolean
persistence.run.globalMounts[].path (4)
/var/run
string
persistence.run.type (4)
emptyDir
string
persistence.run.enabled (1)
true
boolean
defaultPodOptions.securityContext.runAsGroup (8)
568
number, string
defaultPodOptions.securityContext.runAsUser (8)
568
number, string
defaultPodOptions.securityContext.runAsNonRoot (7)
true
boolean
defaultPodOptions.securityContext.fsGroup (1)
1000
number
defaultPodOptions.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
defaultPodOptions.securityContext.seccompProfile.type (1)
RuntimeDefault
string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (8)
tailscale
string
defaultPodOptions.topologySpreadConstraints[].maxSkew (8)
1
number
defaultPodOptions.topologySpreadConstraints[].topologyKey (8)
kubernetes.io/hostname
string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (8)
DoNotSchedule
string
defaultPodOptions.dnsPolicy (2)
ClusterFirstWithHostNet
string
defaultPodOptions.hostNetwork (2)
true
boolean
defaultPodOptions.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)
node-role.kubernetes.io/control-plane
string
defaultPodOptions.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)
DoesNotExist
string
defaultPodOptions.hostname (1)
${CLUSTER_NAME}
string
service.app.controller (8)
tailscale
string
service.app.ports.http.port (8)
9001
number
service.app.nameOverride (7)
tailscale
string
service.tailnet.controller (6)
tailscale
string
service.tailnet.ports.tailnet.port (5)
${TAILNET_PUBLIC_PORT:=1}
string, number
service.tailnet.ports.tailnet.protocol (5)
UDP
string
service.tailnet.ports.tailnet-udp.enabled (1)
true
boolean
service.tailnet.ports.tailnet-udp.port (1)
45387
number
service.tailnet.ports.tailnet-udp.protocol (1)
UDP
string
service.tailnet.type (5)
LoadBalancer
string
service.tailnet.annotations."lbipam.cilium.io/ips" (3)
${SVC_TAILSCALE_ADDR:=temp}
string
service.tailnet.annotations."io.cilium/lb-ipam-ips" (1)
192.168.1.224
string
service.tailnet.externalTrafficPolicy (3)
Cluster
string
service.tailnet.externalIPs[] (1)
- ${TAILSCALE_IPV4}
- ${TAILSCALE_IPV6}
string
service.tailnet.ipFamilies[] (1)
- IPv4
- IPv6
string
service.tailnet.ipFamilyPolicy (1)
PreferDualStack
string
service.main.ports.http.port (2)
2000
number
service.main.enabled (1)
false
boolean
serviceMonitor.app.endpoints[].interval (7)
1m
string
serviceMonitor.app.endpoints[].path (7)
/debug/metrics
string
serviceMonitor.app.endpoints[].port (7)
http
string
serviceMonitor.app.endpoints[].scheme (7)
http
string
serviceMonitor.app.endpoints[].scrapeTimeout (7)
10s
string
serviceMonitor.app.serviceName (7)
tailscale
string
serviceMonitor.app.enabled (1)
true
boolean
serviceMonitor.main.enabled (1)
true
boolean
serviceMonitor.main.endpoints[].path (1)
/debug/metrics
string
serviceMonitor.main.endpoints[].port (1)
http
string
serviceMonitor.main.endpoints[].scheme (1)
http
string
serviceAccount.name (6)
tailscale
string
serviceAccount.create (2)
true
boolean
fullnameOverride (1)
tailscale
string