From 62db94c4ea683ebc8d26aa2d53a48c72f360ae60 Mon Sep 17 00:00:00 2001
From: Yuto Nishida <yuto@berkeley.edu>
Date: Sat, 27 Sep 2025 00:05:58 -0700
Subject: [PATCH] Add SOP for applying tailscale operator

---
 milky-way/tailscale-operator/.gitignore |  1 +
 milky-way/tailscale-operator/readme.md  | 20 ++++++++++++++++++++
 2 files changed, 21 insertions(+)
 create mode 100644 milky-way/tailscale-operator/.gitignore
 create mode 100644 milky-way/tailscale-operator/readme.md

diff --git a/milky-way/tailscale-operator/.gitignore b/milky-way/tailscale-operator/.gitignore
new file mode 100644
index 0000000..6710278
--- /dev/null
+++ b/milky-way/tailscale-operator/.gitignore
@@ -0,0 +1 @@
+operator.yaml
diff --git a/milky-way/tailscale-operator/readme.md b/milky-way/tailscale-operator/readme.md
new file mode 100644
index 0000000..10d3625
--- /dev/null
+++ b/milky-way/tailscale-operator/readme.md
@@ -0,0 +1,20 @@
+# SOP
+
+We need to this manually because tanka cannot vendor helm charts that require value overriding with secrets (without exposing the secret).
+
+For more information, see https://tailscale.com/kb/1236/kubernetes-operator#static-manifests-with-kubectl.
+
+1. Download the [Tailscale Operator manifest file](https://github.com/tailscale/tailscale/blob/main/cmd/k8s-operator/deploy/manifests/operator.yaml).
+
+```sh
+curl -L -o operator.yaml https://raw.githubusercontent.com/tailscale/tailscale/refs/heads/main/cmd/k8s-operator/deploy/manifests/operator.yaml
+```
+
+2. Edit the file to set the `client_id` and `client_secret` values.
+    - Use quotes, just as a YAML best practice.
+
+3. Apply to the cluster.
+
+```sh
+kubectl apply -f operator.yaml
+```
\ No newline at end of file
-- 
2.51.2