From 439089063522e15dea4c86b66d8b1b8a47f34118 Mon Sep 17 00:00:00 2001 From: Giovanni Ferri Date: Tue, 8 Sep 2026 20:04:09 +0100 Subject: [PATCH] fix(tailscale): dedicate OCI Argo egress tag --- values/clusters/oci-lab/tailscale-operator.yaml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/values/clusters/oci-lab/tailscale-operator.yaml b/values/clusters/oci-lab/tailscale-operator.yaml index 03f59a9..c28fe5e 100644 --- a/values/clusters/oci-lab/tailscale-operator.yaml +++ b/values/clusters/oci-lab/tailscale-operator.yaml @@ -1,5 +1,6 @@ -# The OCI OAuth client is authorized for the operator-owned tag only. ProxyGroup -# creation rejects the former talos/cluster tags, which prevents the egress proxy -# backing OCI Argo's remote Unraid API registration from being provisioned. -proxyConfig: +# The operator retains its owner identity; OCI Argo egress proxies use their +# dedicated, least-privilege identity. +operatorConfig: defaultTags: "tag:k8s-operator" +proxyConfig: + defaultTags: "tag:oci-argo-egress"