Update Tailscale policy to include additional destination tag for k8s-operator

rajsinghtech · rajsinghtech · commit 1698d78747fb · 2025-11-05T17:47:25.000-05:00
- Added "tag:k8s" to the destination list for the superuser group accessing the k8s-operator, enhancing access control for Kubernetes resources.
diff --git a/tailscale/policy.hujson b/tailscale/policy.hujson
@@ -129,7 +129,7 @@
 		},
 		{
 			"src": ["group:superuser", "tag:k8s"],
-			"dst": ["tag:k8s-operator"],
+			"dst": ["tag:k8s-operator", "tag:k8s"],
 			"ip":  ["*"],
 			"app": {
 				"tailscale.com/cap/kubernetes": [

Original file line number	Diff line number	Diff line change
`@@ -129,7 +129,7 @@`
`129`	`129`	`},`
`130`	`130`	`{`
`131`	`131`	`"src": ["group:superuser", "tag:k8s"],`
`132`		`- "dst": ["tag:k8s-operator"],`
	`132`	`+ "dst": ["tag:k8s-operator", "tag:k8s"],`
`133`	`133`	`"ip": ["*"],`
`134`	`134`	`"app": {`
`135`	`135`	`"tailscale.com/cap/kubernetes": [`