feat(helm): update tailscale-operator ( 1.72.1 → 1.74.1 )

[lumiere-bot]

This PR contains the following updates:

Package	Update	Change
tailscale-operator	minor	1.72.1 -> 1.74.1

---

Release Notes

tailscale/tailscale (tailscale-operator)

v1.74.1

Compare Source

Please refer to the changelog available at https://tailscale.com/changelog.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[lumiere-bot]

--- HelmRelease: tailscale/tailscale ClusterRole: tailscale/tailscale-operator

+++ HelmRelease: tailscale/tailscale ClusterRole: tailscale/tailscale-operator

@@ -8,20 +8,34 @@

   - ''
   resources:
   - events
   - services
   - services/status
   verbs:
-  - '*'
+  - create
+  - delete
+  - deletecollection
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - networking.k8s.io
   resources:
   - ingresses
   - ingresses/status
   verbs:
-  - '*'
+  - create
+  - delete
+  - deletecollection
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - networking.k8s.io
   resources:
   - ingressclasses
   verbs:
   - get
@@ -46,7 +60,17 @@

   - dnsconfigs/status
   verbs:
   - get
   - list
   - watch
   - update
+- apiGroups:
+  - tailscale.com
+  resources:
+  - recorders
+  - recorders/status
+  verbs:
+  - get
+  - list
+  - watch
+  - update
 
--- HelmRelease: tailscale/tailscale Role: tailscale/operator

+++ HelmRelease: tailscale/tailscale Role: tailscale/operator

@@ -9,23 +9,49 @@

   - ''
   resources:
   - secrets
   - serviceaccounts
   - configmaps
   verbs:
-  - '*'
+  - create
+  - delete
+  - deletecollection
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - apps
   resources:
   - statefulsets
   - deployments
   verbs:
-  - '*'
+  - create
+  - delete
+  - deletecollection
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - discovery.k8s.io
   resources:
   - endpointslices
   verbs:
   - get
   - list
   - watch
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - roles
+  - rolebindings
+  verbs:
+  - get
+  - create
+  - patch
+  - update
+  - list
+  - watch
 
--- HelmRelease: tailscale/tailscale Role: tailscale/proxies

+++ HelmRelease: tailscale/tailscale Role: tailscale/proxies

@@ -7,8 +7,15 @@

 rules:
 - apiGroups:
   - ''
   resources:
   - secrets
   verbs:
-  - '*'
+  - create
+  - delete
+  - deletecollection
+  - get
+  - list
+  - patch
+  - update
+  - watch
 
--- HelmRelease: tailscale/tailscale Deployment: tailscale/operator

+++ HelmRelease: tailscale/tailscale Deployment: tailscale/operator

@@ -20,13 +20,13 @@

       volumes:
       - name: oauth
         secret:
           secretName: operator-oauth
       containers:
       - name: operator
-        image: tailscale/k8s-operator:v1.72.1
+        image: tailscale/k8s-operator:v1.74.1
         imagePullPolicy: Always
         env:
         - name: OPERATOR_INITIAL_TAGS
           value: tag:k8s-operator
         - name: OPERATOR_HOSTNAME
           value: tailscale-operator
@@ -40,13 +40,13 @@

               fieldPath: metadata.namespace
         - name: CLIENT_ID_FILE
           value: /oauth/client_id
         - name: CLIENT_SECRET_FILE
           value: /oauth/client_secret
         - name: PROXY_IMAGE
-          value: tailscale/tailscale:v1.72.1
+          value: tailscale/tailscale:v1.74.1
         - name: PROXY_TAGS
           value: tag:k8s
         - name: APISERVER_PROXY
           value: 'true'
         - name: PROXY_FIREWALL_MODE
           value: auto

[lumiere-bot]

--- kubernetes/kyak/apps/tailscale/tailscale/app Kustomization: flux-system/tailscale HelmRelease: tailscale/tailscale

+++ kubernetes/kyak/apps/tailscale/tailscale/app Kustomization: flux-system/tailscale HelmRelease: tailscale/tailscale

@@ -13,13 +13,13 @@

     spec:
       chart: tailscale-operator
       sourceRef:
         kind: HelmRepository
         name: tailscale
         namespace: flux-system
-      version: 1.72.1
+      version: 1.74.1
   install:
     remediation:
       retries: 3
   interval: 30m
   upgrade:
     cleanupOnFail: true