gcloud-lab/infrastructure/controllers/base/tailscale/namespace.yaml

apiVersion: v1
kind: Namespace
metadata:
  name: tailscale
  labels:
    pod-security.kubernetes.io/warn: restricted
    pod-security.kubernetes.io/warn-version: latest
feat: add Prometheus, Grafana, and Tailscale monitoring stack - Install Prometheus + Grafana via kube-prometheus-stack (ClusterIP only, no public ingress) - Deploy Tailscale Operator for secure VPN access to internal services - Add CNPG/PostgreSQL monitoring dashboards - Add vLLM inference monitoring dashboards (tokens, latency, GPU) - Add Cilium networking dashboards (policy, traffic, drops) - Update infra-controllers staging kustomization to include all controllers - Add monitoring-configs Flux sync for dashboard deployment - Update README with monitoring architecture and access instructions - Remove broken stale monitoring files (Azure Key Vault refs, wrong domains) Access: kubectl port-forward or Tailscale VPN (replace auth key before deploy) 2026-04-26 02:31:53 +00:00			`apiVersion: v1`
			`kind: Namespace`
			`metadata:`
			`name: tailscale`
			`labels:`
Fix Tailscale operator PodSecurity issues - Change namespace from enforce:restricted to warn:restricted to allow operator to run without PodSecurity blocking - Remove runAsUser:0 from operator as it's no longer needed - This allows the Tailscale operator to run with its default configuration 2026-05-04 03:02:09 +00:00			`pod-security.kubernetes.io/warn: restricted`
			`pod-security.kubernetes.io/warn-version: latest`