use different proxy

clusters/cl01tl/monitoring/kube-prometheus-stack/values.yaml

@@ -44,6 +44,8 @@ kube-prometheus-stack:
     ingress:
       enabled: true
       ingressClassName: tailscale
+      label:
+        tailscale.com/proxy-class: no-metrics
       hosts:
         - alertmanager-cl01tl
       tls:
@@ -132,6 +134,8 @@ kube-prometheus-stack:
     ingress:
       enabled: true
       ingressClassName: tailscale
+      label:
+        tailscale.com/proxy-class: no-metrics
       hosts:
         - prometheus-cl01tl
       tls:

clusters/cl01tl/services/tailscale-operator/templates/proxy-class.yaml

@@ -24,3 +24,29 @@ spec:
         resources:
           limits:
             squat.ai/tun: "1"
+
+---
+apiVersion: tailscale.com/v1alpha1
+kind: ProxyClass
+metadata:
+  name: no-metrics
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: no-metrics
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: proxy
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  metrics:
+    enable: false
+  statefulSet:
+    pod:
+      tailscaleContainer:
+        resources:
+          limits:
+            squat.ai/tun: "1"
+      tailscaleInitContainer:
+        resources:
+          limits:
+            squat.ai/tun: "1"