很久就用上了,用于替代之前自行部署的wireguard mesh组网

Token申请

申请两个token, 一个用于pod,一个用于svc

helm 安装

helm repo add mvisonneau https://charts.visonneau.fr
helm repo update

helm upgrade -i  \
  tailscale-relay-svc \
  mvisonneau/tailscale-relay \
  --set config.authKey=<your_auth_key>
  -n kube-system

kubectl get cm/tailscale-relay-svc-config  -n kube-system -o yaml 

apiVersion: v1
data:
  TAILSCALE_ADVERTISE_ROUTES: 10.42.0.0/16
kind: ConfigMap

配置route