diff --git a/charts/stable/tailscale/docs/How-To-Guide.md b/charts/stable/tailscale/docs/How-To-Guide.md index 26f05d7c5cf..014482adf17 100644 --- a/charts/stable/tailscale/docs/How-To-Guide.md +++ b/charts/stable/tailscale/docs/How-To-Guide.md @@ -2,8 +2,8 @@ title: How-To --- -This is a quick how-to or setup-guide to use Tailscale using on your TrueNAS box. -This can be applied to other systems but this specific guide is SCALE specific with the prerequisites. +This is a quick how-to or setup-guide to use Tailscale on Talos. +This can be applied to other systems but this specific guide is Talos on TrueNAS specific with the prerequisites. :::caution @@ -15,6 +15,7 @@ This guide doesn't cover using Tailscale with individual applications. While the - Tailscale Account (Free accounts available at [Tailscale's Official website](https://www.tailscale.com)) - Tailscale Truecharts Chart +- Tailscale DNS setup for Talos Cluster Domain ## Prerequisites (LAN access only) @@ -39,13 +40,6 @@ Also prepare your Tailscale Auth Key for your setup, easy to generate on the pag Ideally use `tailscale` but you can use any name here. -### Global Pod Options - -This section is hidden by default for TrueNAS SCALE but if you wish to use `Host-Networking` or create an interface inside TrueNAS SCALE (`tailscale0`) - -- Click `Expert - Pod Options` -- Click the checkbox for `Host-Networking` if it isn't enabled - ### App Configuration - `Auth Key`: The key you received from tailscale in prerequisites above @@ -59,22 +53,26 @@ This section is hidden by default for TrueNAS SCALE but if you wish to use `Host For more Extra Args and their usage please check the [Tailscale Knowledge Base](https://tailscale.com/kb/1080/cli/#up) since we consider these advanced features and these may/not be compatible with everyone's exact setup. -TODO: Update image with the new fields -![tailscale-step-3](./img/How-To-Image-2.png) - **Hostname example** ![hostname-example](./img/Hostname.png) +## Namespace Privileges Required for Talos Cluster + +In your namespace.yaml file add +```labels: + pod-security.kubernetes.io/enforce: privileged +``` + +to allow this Chart to run with privileged permissions. + ### Networking and Services The default ports are fine for this chart, you shouldn't need to port forward or open ports on your router. -![tailscale-step-4](./img/How-To-Image-3.png) - ### Storage and Persistence -Highly recommended to leave it as `PVC (Simple)` +Highly recommended to leave it as specified in the Charts values.yaml file. ### Ingress @@ -89,6 +87,12 @@ Should be left as is, unless you know what you are doing! You can set custom resources for CPU/RAM, but defaults should be work fine in most cases Defaults are 4 vCores and 8G RAM. +### Tailscale DNS Setup + +In Tailscale Portal on DNS, Namespace section add a new custom nameserver using the Blocky IP address and restrict to domain (SplitDNS) for the Domain used in ClusterTool for Talos. + +![tailscale-nameserver](./img/tailscale-nameserver.png) + ### Addons Shouldn't need to enable any. diff --git a/charts/stable/tailscale/docs/img/How-To-Image-2.png b/charts/stable/tailscale/docs/img/How-To-Image-2.png deleted file mode 100644 index b5d0033ac25..00000000000 Binary files a/charts/stable/tailscale/docs/img/How-To-Image-2.png and /dev/null differ diff --git a/charts/stable/tailscale/docs/img/How-To-Image-3.png b/charts/stable/tailscale/docs/img/How-To-Image-3.png deleted file mode 100644 index aa9c893ca03..00000000000 Binary files a/charts/stable/tailscale/docs/img/How-To-Image-3.png and /dev/null differ diff --git a/charts/stable/tailscale/docs/img/tailscale-nameserver.png b/charts/stable/tailscale/docs/img/tailscale-nameserver.png new file mode 100644 index 00000000000..995fb93b19e Binary files /dev/null and b/charts/stable/tailscale/docs/img/tailscale-nameserver.png differ