Raj Singh

Customer Reliability Engineer
[email protected]

Author: rajsinghtech

clusters/common/apps/tailscale/resources/proxygroup.yaml

@@ -33,7 +33,7 @@ spec:
   replicas: 3
   proxyClass: common
   tags:
-    - tag:k8s
+    - tag:k8s-operator
     - tag:${LOCATION}
   kubeAPIServer:
     mode: auth

tailscale/policy.hujson

@@ -65,6 +65,7 @@
 		},
 		"services": {
 			"tag:k8s": ["tag:k8s"],
+			"tag:k8s-operator": ["tag:k8s-operator"],
 			"svc:ottawa-tsflow": ["tag:ottawa"],
 			"svc:robbinsdale-tsflow": ["tag:robbinsdale"],
 		},
@@ -128,7 +129,7 @@
 		},
 		{
 			"src": ["group:superuser", "tag:k8s"],
-			"dst": ["tag:k8s-operator", "tag:k8s"],
+			"dst": ["tag:k8s-operator"],
 			"ip":  ["*"],
 			"app": {
 				"tailscale.com/cap/kubernetes": [