Skip to content

cmd/k8s-operator/deploy/chart: allow reading OAuth creds from a CSI driver's volume and annotating operator's Service account#14264

Merged
irbekrm merged 4 commits intotailscale:mainfrom
oliverrahner:main
Dec 3, 2024
Merged

cmd/k8s-operator/deploy/chart: allow reading OAuth creds from a CSI driver's volume and annotating operator's Service account#14264
irbekrm merged 4 commits intotailscale:mainfrom
oliverrahner:main

Conversation

@oliverrahner
Copy link
Copy Markdown
Contributor

@oliverrahner oliverrahner commented Dec 3, 2024

This is an alternative approach to #11270 / #12213

It does intentionally not follow the extraVolumes/extraMounts pattern to increase ease-of-use, but solves the very specific problem of using secrets-store-csi-driver.

Not setting the new object results in falling back to the previous default behavior.

Copy link
Copy Markdown
Contributor

@irbekrm irbekrm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for working on this @oliverrahner , this looks neat and makes sense.

I've left two comments, additionally could you please reference an issue number on the commit message to pass our CI bot, see an example 9f9063e

Updates tailscale#14264

Signed-off-by: Oliver Rahner <o.rahner@dke-data.com>
Updates tailscale#14264

Signed-off-by: Oliver Rahner <o.rahner@dke-data.com>
Updates tailscale#14264

Signed-off-by: Oliver Rahner <o.rahner@dke-data.com>
Updates tailscale#14264

Signed-off-by: Oliver Rahner <o.rahner@dke-data.com>
@irbekrm irbekrm changed the title allow secrets volume to be customized cmd/k8s-operator/deploy/chart: allow reading OAuth creds from a CSI driver's volume and annotating operator's Service account Dec 3, 2024
Copy link
Copy Markdown
Contributor

@irbekrm irbekrm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you @oliverrahner !

@irbekrm irbekrm merged commit cbf1a4e into tailscale:main Dec 3, 2024
@irbekrm
Copy link
Copy Markdown
Contributor

irbekrm commented Dec 3, 2024

@oliverrahner I've cut a dev Helm chart with your change - 1.77.162. It will also come out in our stable release this or next week.

@oliverrahner
Copy link
Copy Markdown
Contributor Author

Well, that was one of the quickest PR reviews I ever had :) Thanks a bunch!

thirdeyenick pushed a commit to ninech/tailscale that referenced this pull request Jul 2, 2025
…river's volume and annotating operator's Service account (tailscale#14264)

cmd/k8s-operator/deploy/chart: allow reading OAuth creds from a CSI driver's volume and annotating operator's Service account

Updates tailscale#14264

Signed-off-by: Oliver Rahner <o.rahner@dke-data.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants