Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

https://github.com/maisem/tailscale-on-k8s

kubernetes tailscale

Last synced: about 2 months ago
JSON representation

Host: GitHub
URL: https://github.com/maisem/tailscale-on-k8s
Owner: maisem
License: apache-2.0
Archived: true
Created: 2021-02-02T03:48:40.000Z (over 3 years ago)
Default Branch: main
Last Pushed: 2021-10-14T03:47:27.000Z (over 2 years ago)
Last Synced: 2024-04-30T11:36:47.421Z (2 months ago)
Topics: kubernetes, tailscale
Language: Shell
Homepage:
Size: 20.5 KB
Stars: 13
Watchers: 4
Forks: 0
Open Issues: 0
Metadata Files:
- Readme: README.md
- License: LICENSE

Lists

awesome-stars - maisem/tailscale-on-k8s - (Shell)

README

**DEPRECATED**: Kubernetes is now [officailly supported](https://tailscale.com/blog/kubecon-21) by Tailscale.

# Overview
The goal of this project is to provide a few ways to run Tailscale inside a Kubernetes Cluster

# Instructions
## Setup
1. (Optional) Create the following secret which will automate login.

You will need to get an auth key from [Tailscale Admin Console](https://login.tailscale.com/admin/authkeys).

If you don't provide you the key, you can still use authenticate by using the url in the logs.
```yaml
apiVersion: v1
kind: Secret
metadata:
name: tailscale-auth
stringData:
AUTH_KEY: tskey-...
```

1. Set the image tag:
```bash
export IMAGE_TAG=ts:latest
```

1. Build and push the container
```bash
make push
```

## Sample Sidecar
1. Create the sample nginx pod with a tailscale sidecar
```bash
make sidecar
```
1. If you're not using an AuthKey, authenticate by grabbing the login URL here:

```bash
kubectl logs tailscale-sidecar tailscale
```

1. Check if you can to connect to nginx over tailscale:

```bash
curl "http://$(tailscale ip -4 nginx)"
```

Or, if you have MagicDNS enabled:

```bash
curl http://nginx
```

## Sample Proxy
1. Provide the Cluster IP of the service you want to reach by either:
- creating a new deployment
```bash
kubectl create deployment nginx --image nginx
kubectl expose deployment nginx --port 80
export DEST_IP="$(kubectl get svc nginx -o=jsonpath='{.spec.clusterIP}')"
```
- or, using an existing service
```bash
export DEST_IP="$(kubectl get svc -o=jsonpath='{.spec.clusterIP}')"
```
1. Deploy the proxy pod
```bash
make proxy
```
1. If you're not using an AuthKey, authenticate by grabbing the login URL here:

```bash
kubectl logs proxy
```

1. Check if you can to connect to nginx over tailscale:

```bash
curl "http://$(tailscale ip -4 proxy)"
```

Or, if you have MagicDNS enabled:

```bash
curl http://proxy
```