tailscale/docs/k8s/Makefile

# Copyright (c) Tailscale Inc & AUTHORS
# SPDX-License-Identifier: BSD-3-Clause

TS_ROUTES ?= ""
SA_NAME ?= tailscale
TS_KUBE_SECRET ?= tailscale

rbac:
	@sed -e "s;{{TS_KUBE_SECRET}};$(TS_KUBE_SECRET);g" role.yaml
	@echo "---"
	@sed -e "s;{{SA_NAME}};$(SA_NAME);g" rolebinding.yaml
	@echo "---"
	@sed -e "s;{{SA_NAME}};$(SA_NAME);g" sa.yaml

sidecar:
	@sed -e "s;{{TS_KUBE_SECRET}};$(TS_KUBE_SECRET);g" sidecar.yaml | sed -e "s;{{SA_NAME}};$(SA_NAME);g"

userspace-sidecar:
	@sed -e "s;{{TS_KUBE_SECRET}};$(TS_KUBE_SECRET);g" userspace-sidecar.yaml | sed -e "s;{{SA_NAME}};$(SA_NAME);g"

proxy:
	@sed -e "s;{{TS_KUBE_SECRET}};$(TS_KUBE_SECRET);g" proxy.yaml | sed -e "s;{{SA_NAME}};$(SA_NAME);g" | sed -e "s;{{TS_DEST_IP}};$(TS_DEST_IP);g"

subnet-router:
	@sed -e "s;{{TS_KUBE_SECRET}};$(TS_KUBE_SECRET);g" subnet.yaml | sed -e "s;{{SA_NAME}};$(SA_NAME);g" | sed -e "s;{{TS_ROUTES}};$(TS_ROUTES);g"
all: update copyright and license headers This updates all source files to use a new standard header for copyright and license declaration. Notably, copyright no longer includes a date, and we now use the standard SPDX-License-Identifier header. This commit was done almost entirely mechanically with perl, and then some minimal manual fixes. Updates #6865 Signed-off-by: Will Norris <will@tailscale.com> 2023-01-27 21:37:20 +00:00			`# Copyright (c) Tailscale Inc & AUTHORS`
			`# SPDX-License-Identifier: BSD-3-Clause`
docs/k8s: add instructions on how to run as a sidecar or a proxy. Signed-off-by: Maisem Ali <maisem@tailscale.com> 2021-10-12 21:24:07 +00:00
fix: typo rename, ROUTES -> TS_ROUTES Signed-off-by: Jake Edgington <jake.edgington@gmail.com> 2022-07-01 03:09:09 +00:00			`TS_ROUTES ?= ""`
docs/k8s: add instructions on how to run as a sidecar or a proxy. Signed-off-by: Maisem Ali <maisem@tailscale.com> 2021-10-12 21:24:07 +00:00			`SA_NAME ?= tailscale`
fix: typo rename, KUBE_SECRET -> TS_KUBE_SECRET Signed-off-by: Jake Edgington <jake.edgington@gmail.com> 2022-07-01 03:05:49 +00:00			`TS_KUBE_SECRET ?= tailscale`
docs/k8s: add instructions on how to run as a sidecar or a proxy. Signed-off-by: Maisem Ali <maisem@tailscale.com> 2021-10-12 21:24:07 +00:00
			`rbac:`
docs/k8s: don't call kubectl directly from Makefile Instead of calling kubectl directly in k8s Makefile, write the yaml to stdout so it can be reviewed/edited/etc before manually applying with kubectl. Fixes: #8511 Signed-off-by: David Wolever <david@wolever.net> 2023-07-01 01:05:33 +00:00			`@sed -e "s;{{TS_KUBE_SECRET}};$(TS_KUBE_SECRET);g" role.yaml`
			`@echo "---"`
			`@sed -e "s;{{SA_NAME}};$(SA_NAME);g" rolebinding.yaml`
			`@echo "---"`
			`@sed -e "s;{{SA_NAME}};$(SA_NAME);g" sa.yaml`
docs/k8s: add instructions on how to run as a sidecar or a proxy. Signed-off-by: Maisem Ali <maisem@tailscale.com> 2021-10-12 21:24:07 +00:00
			`sidecar:`
docs/k8s: don't call kubectl directly from Makefile Instead of calling kubectl directly in k8s Makefile, write the yaml to stdout so it can be reviewed/edited/etc before manually applying with kubectl. Fixes: #8511 Signed-off-by: David Wolever <david@wolever.net> 2023-07-01 01:05:33 +00:00			`@sed -e "s;{{TS_KUBE_SECRET}};$(TS_KUBE_SECRET);g" sidecar.yaml \| sed -e "s;{{SA_NAME}};$(SA_NAME);g"`
docs/k8s: add instructions on how to run as a sidecar or a proxy. Signed-off-by: Maisem Ali <maisem@tailscale.com> 2021-10-12 21:24:07 +00:00
			`userspace-sidecar:`
docs/k8s: don't call kubectl directly from Makefile Instead of calling kubectl directly in k8s Makefile, write the yaml to stdout so it can be reviewed/edited/etc before manually applying with kubectl. Fixes: #8511 Signed-off-by: David Wolever <david@wolever.net> 2023-07-01 01:05:33 +00:00			`@sed -e "s;{{TS_KUBE_SECRET}};$(TS_KUBE_SECRET);g" userspace-sidecar.yaml \| sed -e "s;{{SA_NAME}};$(SA_NAME);g"`
docs/k8s: add instructions on how to run as a sidecar or a proxy. Signed-off-by: Maisem Ali <maisem@tailscale.com> 2021-10-12 21:24:07 +00:00
			`proxy:`
docs/k8s: don't call kubectl directly from Makefile Instead of calling kubectl directly in k8s Makefile, write the yaml to stdout so it can be reviewed/edited/etc before manually applying with kubectl. Fixes: #8511 Signed-off-by: David Wolever <david@wolever.net> 2023-07-01 01:05:33 +00:00			`@sed -e "s;{{TS_KUBE_SECRET}};$(TS_KUBE_SECRET);g" proxy.yaml \| sed -e "s;{{SA_NAME}};$(SA_NAME);g" \| sed -e "s;{{TS_DEST_IP}};$(TS_DEST_IP);g"`
docs/k8s: add example about setting up a subnet router Signed-off-by: Robert <rspier@pobox.com> Co-authored-by: Maisem Ali <3953239+maisem@users.noreply.github.com> 2021-10-16 22:17:36 +00:00
			`subnet-router:`
docs/k8s: don't call kubectl directly from Makefile Instead of calling kubectl directly in k8s Makefile, write the yaml to stdout so it can be reviewed/edited/etc before manually applying with kubectl. Fixes: #8511 Signed-off-by: David Wolever <david@wolever.net> 2023-07-01 01:05:33 +00:00			`@sed -e "s;{{TS_KUBE_SECRET}};$(TS_KUBE_SECRET);g" subnet.yaml \| sed -e "s;{{SA_NAME}};$(SA_NAME);g" \| sed -e "s;{{TS_ROUTES}};$(TS_ROUTES);g"`