From d6f142fb7b23c8891199934350036c745890353a Mon Sep 17 00:00:00 2001
From: Giovanni Ferri <giovanni@syscode.uk>
Date: Wed, 9 Sep 2026 12:22:58 +0100
Subject: [PATCH] fix(oci): restore Omni Kubernetes proxy service

---
 .../manifests/tailscale-egress.yaml           | 27 +++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 clusters/oci-lab/apps/unraid-cluster-registration/manifests/tailscale-egress.yaml

diff --git a/clusters/oci-lab/apps/unraid-cluster-registration/manifests/tailscale-egress.yaml b/clusters/oci-lab/apps/unraid-cluster-registration/manifests/tailscale-egress.yaml
new file mode 100644
index 0000000..a2fea20
--- /dev/null
+++ b/clusters/oci-lab/apps/unraid-cluster-registration/manifests/tailscale-egress.yaml
@@ -0,0 +1,27 @@
+# Argo CD runs in OCI without a node-level Tailscale client. The operator's L3
+# egress proxy provides private access to Omni's Kubernetes API proxy instead.
+apiVersion: tailscale.com/v1alpha1
+kind: ProxyGroup
+metadata:
+  name: omni-egress
+  namespace: argocd
+spec:
+  type: egress
+  replicas: 1
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: omni-kubernetes-proxy
+  namespace: argocd
+  annotations:
+    tailscale.com/tailnet-fqdn: omni.wind-bearded.ts.net
+    tailscale.com/proxy-group: omni-egress
+spec:
+  type: ExternalName
+  externalName: placeholder
+  ports:
+    - name: https
+      port: 8100
+      protocol: TCP
+      targetPort: 8100