values.yaml

# Default values for tailscale.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

image:
  repository: tailscale/tailscale
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: ""

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

tailscale: {}
  # TS_AUTH_KEY: tskey-auth-
  # TS_TAGS: tag:exitnode

# -- Pods Service Account.
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

# -- Annotations for pod.
# ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
podAnnotations: {}

# -- Pod Security Context.
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
podSecurityContext: {}
  # sysctls:
  #   # - name: net.ipv6.conf.all.forwarding
  #   #   value: "1"
  #   - name: net.ipv6.conf.all.disable_ipv6
  #     value: "1"

# -- Container Security Context.
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
securityContext:
  seccompProfile:
    type: RuntimeDefault
  capabilities:
    add:
      - NET_ADMIN
      - NET_RAW
    drop:
      - ALL
  # readOnlyRootFilesystem: true
  runAsNonRoot: false
  runAsUser: 0

# -- Service parameters
# ref: https://kubernetes.io/docs/concepts/services-networking/service/
service:
  type: NodePort
  # -- P2P endpoints port
  port: 30025
  # -- P2P network family
  ipFamilies: [IPv4, IPv6]

# -- Resource requests and limits.
# ref: https://kubernetes.io/docs/user-guide/compute-resources/
resources:
  limits:
    cpu: 500m
    memory: 512Mi
  requests:
    cpu: 100m
    memory: 256Mi

# -- DNS Policy for pod
# ref: https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/
# ClusterFirst or Local
dnsPolicy: Local

# -- Network Policy parameters.
# ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/
networkPolicy:
  enabled: false

# -- Use a daemonset instead of a deployment
useDaemonSet: false

# -- pod deployment update strategy type.
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#updating-a-deployment
updateStrategy:
  type: RollingUpdate
  rollingUpdate:
    maxUnavailable: 1

# -- Node labels for pod assignment.
# ref: https://kubernetes.io/docs/user-guide/node-selection/
nodeSelector: {}
  # node-role.kubernetes.io/control-plane: ""

# -- Tolerations for pod assignment.
# ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
tolerations: []
  # - key: node-role.kubernetes.io/control-plane
  #   effect: NoSchedule

# -- Affinity for pod assignment.
# ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
affinity: {}