feat: refactor apps

clusters/cl01tl/helm/tailscale-operator/Chart.yaml

@@ -4,14 +4,14 @@ version: 1.0.0
 description: Tailscale Operator
 keywords:
   - tailscale-operator
-  - tailscale
   - wireguard
-  - vpn
-  - kubernetes
-home: https://wiki.alexlebens.dev/s/673177ef-e91b-43ad-9b80-d5037ec77852
+  - operator
+home: https://docs.alexlebens.dev/applications/tailscale-operator/
 sources:
   - https://github.com/tailscale/tailscale
+  - https://hub.docker.com/r/tailscale/tailscale
   - https://hub.docker.com/r/tailscale/k8s-operator
+  - https://hub.docker.com/r/tailscale/k8s-nameserver
   - https://github.com/tailscale/tailscale/tree/main/cmd/k8s-operator/deploy/chart
 maintainers:
   - name: alexlebens
@@ -20,5 +20,5 @@ dependencies:
     version: 1.94.2
     repository: https://pkgs.tailscale.com/helmcharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tailscale-light.png
-# renovate: datasource=github-releases depName=tailscale/tailscale
-appVersion: v1.96.4
+# renovate: datasource=docker depName=tailscale/tailscale
+appVersion: v1.94.2

clusters/cl01tl/helm/tailscale-operator/templates/external-secrets.yaml

@@ -14,15 +14,9 @@ spec:
   data:
     - secretKey: client_id
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /tailscale/k8s-operator
-        metadataPolicy: None
         property: clientId
     - secretKey: client_secret
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /tailscale/k8s-operator
-        metadataPolicy: None
         property: clientSecret

clusters/cl01tl/helm/tailscale-operator/values.yaml

@@ -1,21 +1,18 @@
 tailscale-operator:
-  oauth: {}
   installCRDs: true
   operatorConfig:
     defaultTags:
       - "tag:k8s-operator"
-    logging: info
+    image:
+      repository: tailscale/k8s-operator
+      tag: v1.94.2
+      digest: sha256:7956bd50dca9dc804b98720df94d112b54af85449ed0bf8cc7fad0346b225067
     hostname: tailscale-operator-cl01tl
-    nodeSelector:
-      kubernetes.io/os: linux
-    operatorConfig:
-      securityContext:
-        capabilities:
-          add:
-            - NET_ADMIN
+  ingressClass:
+    name: tailscale
   proxyConfig:
-    defaultTags: "tag:k8s"
-    firewallMode: auto
-    defaultProxyClass: "no-metrics"
-  apiServerProxyConfig:
-    mode: "false"
+    image:
+      repository: tailscale/tailscale
+      tag: v1.94.2
+      digest: sha256:95e528798bebe75f39b10e74e7051cf51188ee615934f232ba7ad06a3390ffa1
+    defaultProxyClass: no-metrics