fix(tailscale): switch to the new golang binary (#4307)

* fix(tailscale): switch to the new golang binary

* temp, let CI  install tailscale

* test without secret

* change key name in secret

* change socket to varrun, which is the default that `tailscale` command looks for

* test with varrun enabled

* remove tty

* don't try to install TS

* dont load authkey as env

* update vpn template

* remove /var/lib as it now uses kubesecret for the state

* bump

templates/questions/addons/vpn.yaml

@@ -50,6 +50,12 @@
                         type: string
                         private: true
                         default: ""
+                    - variable: auth_once
+                      label: Auth Once
+                      description: Only attempt to log in if not already logged in.
+                      schema:
+                        type: boolean
+                        default: true
                     - variable: accept_dns
                       label: Accept DNS
                       description: Accept DNS configuration from the admin console.
@@ -76,7 +82,13 @@
                         default: ""
                     - variable: sock5_server
                       label: Sock5 Server
-                      description: Sock5 Server
+                      description: The address on which to listen for SOCKS5 proxying into the tailscale net.
+                      schema:
+                        type: string
+                        default: ""
+                    - variable: outbound_http_proxy_listen
+                      label: Outbound HTTP Proxy Listen
+                      description: The address on which to listen for HTTP proxying into the tailscale net.
                       schema:
                         type: string
                         default: ""