feat(helm): update tailscale-operator ( 1.76.6 → 1.78.3 )

[lumiere-bot]

This PR contains the following updates:

Package	Update	Change
tailscale-operator	minor	1.76.6 -> 1.78.3

---

Release Notes

tailscale/tailscale (tailscale-operator)

v1.78.3

Compare Source

v1.78.1

Compare Source

Please refer to the changelog available at https://tailscale.com/changelog.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[lumiere-bot]

--- kubernetes/kyak/apps/tailscale/tailscale/app Kustomization: flux-system/tailscale HelmRelease: tailscale/tailscale

+++ kubernetes/kyak/apps/tailscale/tailscale/app Kustomization: flux-system/tailscale HelmRelease: tailscale/tailscale

@@ -13,13 +13,13 @@

     spec:
       chart: tailscale-operator
       sourceRef:
         kind: HelmRepository
         name: tailscale
         namespace: flux-system
-      version: 1.76.6
+      version: 1.78.3
   install:
     remediation:
       retries: 3
   interval: 30m
   upgrade:
     cleanupOnFail: true

[lumiere-bot]

--- HelmRelease: tailscale/tailscale ClusterRole: tailscale/tailscale-operator

+++ HelmRelease: tailscale/tailscale ClusterRole: tailscale/tailscale-operator

@@ -72,7 +72,17 @@

   - recorders/status
   verbs:
   - get
   - list
   - watch
   - update
+- apiGroups:
+  - apiextensions.k8s.io
+  resources:
+  - customresourcedefinitions
+  verbs:
+  - get
+  - list
+  - watch
+  resourceNames:
+  - servicemonitors.monitoring.coreos.com
 
--- HelmRelease: tailscale/tailscale Role: tailscale/operator

+++ HelmRelease: tailscale/tailscale Role: tailscale/operator

@@ -62,7 +62,17 @@

   - get
   - create
   - patch
   - update
   - list
   - watch
+- apiGroups:
+  - monitoring.coreos.com
+  resources:
+  - servicemonitors
+  verbs:
+  - get
+  - list
+  - update
+  - create
+  - delete
 
--- HelmRelease: tailscale/tailscale Role: tailscale/proxies

+++ HelmRelease: tailscale/tailscale Role: tailscale/proxies

@@ -15,7 +15,15 @@

   - deletecollection
   - get
   - list
   - patch
   - update
   - watch
+- apiGroups:
+  - ''
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+  - get
 
--- HelmRelease: tailscale/tailscale Deployment: tailscale/operator

+++ HelmRelease: tailscale/tailscale Deployment: tailscale/operator

@@ -20,13 +20,13 @@

       volumes:
       - name: oauth
         secret:
           secretName: operator-oauth
       containers:
       - name: operator
-        image: tailscale/k8s-operator:v1.76.6
+        image: tailscale/k8s-operator:v1.78.3
         imagePullPolicy: Always
         env:
         - name: OPERATOR_INITIAL_TAGS
           value: tag:k8s-operator
         - name: OPERATOR_HOSTNAME
           value: tailscale-operator
@@ -40,19 +40,27 @@

               fieldPath: metadata.namespace
         - name: CLIENT_ID_FILE
           value: /oauth/client_id
         - name: CLIENT_SECRET_FILE
           value: /oauth/client_secret
         - name: PROXY_IMAGE
-          value: tailscale/tailscale:v1.76.6
+          value: tailscale/tailscale:v1.78.3
         - name: PROXY_TAGS
           value: tag:k8s
         - name: APISERVER_PROXY
           value: 'true'
         - name: PROXY_FIREWALL_MODE
           value: auto
+        - name: POD_NAME
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.name
+        - name: POD_UID
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.uid
         volumeMounts:
         - name: oauth
           mountPath: /oauth
           readOnly: true
       nodeSelector:
         kubernetes.io/os: linux