fix(tailscale): switch to the new golang binary (#4307)

* fix(tailscale): switch to the new golang binary

* temp, let CI  install tailscale

* test without secret

* change key name in secret

* change socket to varrun, which is the default that `tailscale` command looks for

* test with varrun enabled

* remove tty

* don't try to install TS

* dont load authkey as env

* update vpn template

* remove /var/lib as it now uses kubesecret for the state

* bump

charts/stable/tailscale/templates/_configmap.tpl

@@ -26,8 +26,10 @@ metadata:
     {{- include "tc.common.labels" . | nindent 4 }}
 data:
   TS_KUBE_SECRET: {{ $secretName | squote }}
+  TS_SOCKET: /var/run/tailscale/tailscaled.sock
   TS_USERSPACE: {{ .Values.tailscale.userspace | quote }}
   TS_ACCEPT_DNS: {{ .Values.tailscale.accept_dns | quote }}
+  TS_AUTH_ONCE: {{ .Values.tailscale.auth_once | quote }}
   {{- with .Values.tailscale.routes }}
   TS_ROUTES: {{ . }}
   {{- end }}
@@ -43,4 +45,7 @@ data:
   {{- with $customArgs }}
   TS_EXTRA_ARGS: {{ . | quote }}
   {{- end }}
+  {{- with .Values.tailscale.outbound_http_proxy_listen }}
+  TS_OUTBOUND_HTTP_PROXY_LISTEN: {{ . | quote }}
+  {{- end }}
 {{- end }}

charts/stable/tailscale/templates/_secret.tpl

@@ -14,6 +14,7 @@ metadata:
     {{- include "tc.common.labels" . | nindent 4 }}
 data:
   {{- with .Values.tailscale.authkey }}
-  TS_AUTH_KEY: {{ . | b64enc }}
+  {{/* Name of the authkey is crucial, don't change it */}}
+  authkey: {{ . | b64enc }}
   {{- end }}
 {{- end }}