apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: tailscale-operator
  namespace: tailscale
spec:
  interval: 1h
  timeout: 15m
  chart:
    spec:
      chart: tailscale-operator
      version: "1.96.x"
      sourceRef:
        kind: HelmRepository
        name: tailscale
        namespace: tailscale
      interval: 12h
  targetNamespace: tailscale
  install:
    createNamespace: true
    crds: Create
  upgrade:
    crds: CreateReplace
  values:
    operatorConfig:
      tags: [tailnet]
      operatorSecretRef:
        name: tailscale-operator-authkey
        key: authkey
      logFile: "/var/log/tailscale.log"
      waitForLinkLocal: false
      useOAuth: false
      useOIDC: false
      podSecurityContext: {}
      securityContext:
        allowPrivilegeEscalation: false
        seccompProfile:
          type: RuntimeDefault
        capabilities:
          drop:
            - ALL
    webhook:
      enabled: false