tailscale helm

No introduction found. Create it?

Install

Install with:

helm repo add bjw-s oci://ghcr.io/bjw-s/helm/
helm install tailscale bjw-s/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (3 out of 10)

NameRepoStarsVersionTimestamp
tailscaleburoa/k8s-gitops1343.1.07 hours ago
tailscaleharaldkoch/kochhaus-home933.1.0a day ago
tailscalerafaribe/home-ops353.0.42 months ago

Values

See the most popular values for this chart:

KeyTypes
persistence.cache.globalMounts[].path (7)
/.cache
string
persistence.cache.type (7)
emptyDir
string
persistence.tmp.type (7)
emptyDir
string
persistence.tmp.globalMounts[].path (5)
/tmp
string
serviceAccount.name (6)
tailscale
string
serviceAccount.create (2)
true
boolean
serviceAccount.tailnet.annotations."io.cilium/lb-ipam-ips" (1)
${LB_TAILSCALE}
string
serviceAccount.tailnet.controller (1)
main
string
serviceAccount.tailnet.ports.tailnet-udp.enabled (1)
true
boolean
serviceAccount.tailnet.ports.tailnet-udp.port (1)
${TAILNET_PUBLIC_PORT}
string
serviceAccount.tailnet.ports.tailnet-udp.protocol (1)
UDP
string
serviceAccount.tailnet.type (1)
LoadBalancer
string
controllers.main.containers.main.env.TS_EXTRA_ARGS (5)
--advertise-exit-node --advertise-tags=tag:k8s
string
controllers.main.containers.main.env.TS_KUBE_SECRET (5)

string
controllers.main.containers.main.env.TS_ROUTES (5)
192.168.29.0/24,192.168.30.0/24
string
controllers.main.containers.main.env.TS_USERSPACE (5)
true
boolean, string
controllers.main.containers.main.env.TZ (4)
${TIMEZONE}
string
controllers.main.containers.main.env.NO_AUTOUPDATE (3)
true
boolean
controllers.main.containers.main.env.PORT (3)
${TAILNET_PUBLIC_PORT}
string, number
controllers.main.containers.main.env.SA_NAME (2)
tailscale
string
controllers.main.containers.main.env.TS_STATE_DIR (2)
/tmp
string
controllers.main.containers.main.env.TS_TAILSCALED_EXTRA_ARGS (2)
--debug=0.0.0.0:2000
string
controllers.main.containers.main.env.TS_AUTHKEY.valueFrom.secretKeyRef.key (1)
TS_AUTHKEY
string
controllers.main.containers.main.env.TS_AUTHKEY.valueFrom.secretKeyRef.name (1)
tailscale-auth-1
string
controllers.main.containers.main.image.repository (5)
ghcr.io/tailscale/tailscale
string
controllers.main.containers.main.image.tag (5)
v1.64.2
string
controllers.main.containers.main.envFrom[].secretRef.name (4)
tailscale-secret
string
controllers.main.containers.main.probes.liveness.enabled (3)
false
boolean
controllers.main.containers.main.probes.readiness.enabled (3)
false
boolean
controllers.main.containers.main.probes.startup.enabled (2)
false
boolean
controllers.main.containers.main.resources.limits.memory (2)
256M
string
controllers.main.containers.main.resources.requests.cpu (2)
5m
string
controllers.main.containers.main.resources.requests.memory (2)
128M
string
controllers.main.containers.main.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.main.containers.main.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.main.containers.main.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.main.annotations."reloader.stakater.com/auto" (3)
true
string
controllers.main.pod.securityContext.runAsGroup (3)
568
number
controllers.main.pod.securityContext.runAsUser (3)
568
number
controllers.main.pod.securityContext.fsGroup (2)
568
number
controllers.main.pod.securityContext.fsGroupChangePolicy (2)
OnRootMismatch
string
controllers.main.pod.securityContext.runAsNonRoot (2)
true
boolean
controllers.main.pod.securityContext.supplementalGroups[] (1)
- "3000"
- "3001"
- "568"
number
controllers.main.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (2)
tailscale
string
controllers.main.pod.topologySpreadConstraints[].maxSkew (2)
1
number
controllers.main.pod.topologySpreadConstraints[].topologyKey (2)
kubernetes.io/hostname
string
controllers.main.pod.topologySpreadConstraints[].whenUnsatisfiable (2)
DoNotSchedule
string
controllers.main.replicas (3)
2
number
controllers.main.strategy (3)
RollingUpdate
string
controllers.tailscale.annotations."reloader.stakater.com/auto" (5)
true
string
controllers.tailscale.containers.app.env.NO_AUTOUPDATE (5)
true
boolean
controllers.tailscale.containers.app.env.TS_EXTRA_ARGS (5)
--advertise-exit-node --advertise-tags=tag:k8s
string
controllers.tailscale.containers.app.env.TS_STATE_DIR (5)
/tmp
string
controllers.tailscale.containers.app.env.TS_USERSPACE (5)
true
boolean
controllers.tailscale.containers.app.env.TZ (5)
${TIMEZONE}
string
controllers.tailscale.containers.app.env.PORT (3)
${TAILNET_PUBLIC_PORT}
string, number
controllers.tailscale.containers.app.env.TS_ROUTES (3)
${LAN_SERVER_IP_CIDR},${CILIUM_LB_CIDR}
string
controllers.tailscale.containers.app.env.TS_TAILSCALED_EXTRA_ARGS (3)
--debug=0.0.0.0:3000
string
controllers.tailscale.containers.app.env.SA_NAME (2)
tailscale
string
controllers.tailscale.containers.app.env.TS_ACCEPT_DNS (2)
false
boolean
controllers.tailscale.containers.app.env.TS_HOSTNAME (2)
tailscale-k8s
string
controllers.tailscale.containers.app.env.TS_KUBE_SECRET (2)
tailscale-state
string
controllers.tailscale.containers.app.envFrom[].secretRef.name (5)
tailscale-secret
string
controllers.tailscale.containers.app.image.repository (5)
ghcr.io/tailscale/tailscale
string
controllers.tailscale.containers.app.image.tag (5)
v1.66.3@sha256:cf8e97667e8be250caaed88694cec0befe11040bbd5a3de3b33086cc52ef4eb1
string
controllers.tailscale.containers.app.securityContext.allowPrivilegeEscalation (5)
false
boolean
controllers.tailscale.containers.app.securityContext.capabilities.drop[] (5)
- ALL
string
controllers.tailscale.containers.app.securityContext.readOnlyRootFilesystem (5)
true
boolean
controllers.tailscale.containers.app.resources.limits.memory (4)
200Mi
string
controllers.tailscale.containers.app.resources.requests.cpu (4)
5m
string
controllers.tailscale.containers.app.resources.requests.memory (2)
50Mi
string
controllers.tailscale.containers.app.probes.liveness.enabled (3)
true
boolean
controllers.tailscale.containers.app.probes.readiness.enabled (3)
true
boolean
controllers.tailscale.pod.securityContext.fsGroup (3)
568
number
controllers.tailscale.pod.securityContext.fsGroupChangePolicy (3)
OnRootMismatch
string
controllers.tailscale.pod.securityContext.runAsGroup (3)
568
number
controllers.tailscale.pod.securityContext.runAsNonRoot (3)
true
boolean
controllers.tailscale.pod.securityContext.runAsUser (3)
568
number
controllers.tailscale.pod.annotations.setGateway (1)
true
string
controllers.tailscale.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
tailscale
string
controllers.tailscale.pod.topologySpreadConstraints[].maxSkew (1)
1
number
controllers.tailscale.pod.topologySpreadConstraints[].topologyKey (1)
kubernetes.io/hostname
string
controllers.tailscale.pod.topologySpreadConstraints[].whenUnsatisfiable (1)
DoNotSchedule
string
controllers.tailscale.replicas (3)
2
number
controllers.tailscale.strategy (3)
RollingUpdate
string
controllers.secondary.containers.main.env.TS_AUTHKEY.valueFrom.secretKeyRef.key (1)
TS_AUTHKEY
string
controllers.secondary.containers.main.env.TS_AUTHKEY.valueFrom.secretKeyRef.name (1)
tailscale-auth-2
string
controllers.secondary.containers.main.env.TS_EXTRA_ARGS (1)
--advertise-tags=tag:k8s-operator
string
controllers.secondary.containers.main.env.TS_KUBE_SECRET (1)
tailscale-state-2
string
controllers.secondary.containers.main.env.TS_ROUTES (1)
10.43.100.100/32
string
controllers.secondary.containers.main.env.TS_USERSPACE (1)
true
string
controllers.secondary.containers.main.image.repository (1)
ghcr.io/tailscale/tailscale
string
controllers.secondary.containers.main.image.tag (1)
v1.61.11
string
controllers.secondary.enabled (1)
true
boolean
service.app.controller (4)
tailscale
string
service.app.nameOverride (3)
tailscale
string
service.app.ports.http.port (3)
3000
number
service.app.ports.tailnet.port (1)
41642
number
service.app.ports.tailnet.protocol (1)
UDP
string
service.app.annotations."external-dns.alpha.kubernetes.io/hostname" (1)
tailscale.${SECRET_DOMAIN_INTERNAL}
string
service.app.annotations."io.cilium/lb-ipam-ips" (1)
${TAILSCALE_LB_ADDR}
string
service.app.externalTrafficPolicy (1)
Cluster
string
service.app.type (1)
LoadBalancer
string
service.main.ports.http.port (4)
2000
number, string
service.main.enabled (1)
false
boolean
service.tailnet.controller (4)
tailscale
string
service.tailnet.annotations."io.cilium/lb-ipam-ips" (3)
${TAILSCALE_LB_IP}
string
service.tailnet.type (3)
LoadBalancer
string
service.tailnet.ports.tailnet-udp.enabled (2)
true
boolean
service.tailnet.ports.tailnet-udp.port (2)
${TAILNET_PUBLIC_PORT}
string, number
service.tailnet.ports.tailnet-udp.protocol (2)
UDP
string
service.tailnet.ports.tailnet.port (2)
${TAILNET_PUBLIC_PORT}
string
service.tailnet.ports.tailnet.protocol (2)
UDP
string
service.tailnet.labels."io.cilium/lb-ipam-layer2" (1)
true
string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (3)
tailscale
string
defaultPodOptions.topologySpreadConstraints[].maxSkew (3)
1
number
defaultPodOptions.topologySpreadConstraints[].topologyKey (3)
kubernetes.io/hostname
string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (3)
DoNotSchedule
string
defaultPodOptions.dnsPolicy (2)
ClusterFirstWithHostNet
string
defaultPodOptions.hostNetwork (2)
true
boolean
defaultPodOptions.securityContext.runAsGroup (2)
568
number
defaultPodOptions.securityContext.runAsNonRoot (2)
true
boolean
defaultPodOptions.securityContext.runAsUser (2)
568
number
serviceMonitor.app.endpoints[].interval (3)
1m
string
serviceMonitor.app.endpoints[].path (3)
/debug/metrics
string
serviceMonitor.app.endpoints[].port (3)
http
string
serviceMonitor.app.endpoints[].scheme (3)
http
string
serviceMonitor.app.endpoints[].scrapeTimeout (3)
10s
string
serviceMonitor.app.serviceName (3)
tailscale
string
serviceMonitor.main.enabled (3)
true
boolean
serviceMonitor.main.endpoints[].path (3)
/debug/metrics
string
serviceMonitor.main.endpoints[].port (3)
http
string
serviceMonitor.main.endpoints[].scheme (3)
http
string
serviceMonitor.main.endpoints[].interval (2)
1m
string
serviceMonitor.main.endpoints[].scrapeTimeout (2)
30s
string