sources
note: k0s never works as well as you think
nix instructions: https://github.com/NixOS/nixpkgs/blob/master/pkgs/applications/networking/cluster/k3s/README.md
tailscale operator
helm repo add tailscale https://pkgs.tailscale.com/helmcharts
helm repo update
helm upgrade \
--install \
tailscale-operator \
tailscale/tailscale-operator \
--namespace=tailscale \
--create-namespace \
--set-string oauth.clientId="<OAauth client ID>" \
--set-string oauth.clientSecret="<OAuth client secret>" \
--wait
Currently clouflare domains cannot be CNAME'd to tailscale domains:
- https://github.com/tailscale/tailscale/issues/7650
- related, different IP addresses: https://tailscale.com/blog/choose-your-ip#natural-solutions
Kubernetes ingress controller
I had to modify the base ingress to allow for use on 80 and 443. There should be a way to do this with helm, but I can never quite get it to work
this is the original: https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.12.0/deploy/static/provider/baremetal/deploy.yaml
the ingress-nginx-controller was changed to a daemonset rather than an deployment