jv
/
my-homelab-configs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Document direct Tofu Tailscale worker flag

This commit is contained in:
juvdiaz 2026-06-29 21:41:32 -06:00
parent df5702de34
commit 99b421ee84
2 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
README.md
View File

@ -196,6 +196,15 @@ ephemeral or pre-authorized auth key outside Git, either in
LAB_PIMOX_WORKER_TAILSCALE_ENABLED=true ./jeannie up LAB_PIMOX_WORKER_TAILSCALE_ENABLED=true ./jeannie up
``` ```
When applying `bootstrap/cluster` directly, use the OpenTofu variable name
instead of the Jeannie `LAB_` wrapper:
```bash
TF_VAR_worker_tailscale_enabled=true \
tofu -chdir=bootstrap/cluster apply \
-var-file="$PWD/.lab/cluster-workers.auto.tfvars.json"
```
Worker Tailscale defaults to `--accept-routes=true` and enables pod egress SNAT Worker Tailscale defaults to `--accept-routes=true` and enables pod egress SNAT
from the Kubernetes pod CIDR to `tailscale0`, so pods on Pimox workers can reach from the Kubernetes pod CIDR to `tailscale0`, so pods on Pimox workers can reach
tailnet-only services. Override with tailnet-only services. Override with

9
README.md.tmpl
View File

@ -196,6 +196,15 @@ ephemeral or pre-authorized auth key outside Git, either in
LAB_PIMOX_WORKER_TAILSCALE_ENABLED=true ./{{ main_script }} up LAB_PIMOX_WORKER_TAILSCALE_ENABLED=true ./{{ main_script }} up
``` ```
When applying `bootstrap/cluster` directly, use the OpenTofu variable name
instead of the Jeannie `LAB_` wrapper:
```bash
TF_VAR_worker_tailscale_enabled=true \
tofu -chdir=bootstrap/cluster apply \
-var-file="$PWD/.lab/cluster-workers.auto.tfvars.json"
```
Worker Tailscale defaults to `--accept-routes=true` and enables pod egress SNAT Worker Tailscale defaults to `--accept-routes=true` and enables pod egress SNAT
from the Kubernetes pod CIDR to `tailscale0`, so pods on Pimox workers can reach from the Kubernetes pod CIDR to `tailscale0`, so pods on Pimox workers can reach
tailnet-only services. Override with tailnet-only services. Override with