Skip to content

feat: add hardened tailscale-operator image and chart#330

Draft
dylanmtaylor wants to merge 1 commit into
docker-hardened-images:mainfrom
dylanmtaylor:feat/tailscale-operator
Draft

feat: add hardened tailscale-operator image and chart#330
dylanmtaylor wants to merge 1 commit into
docker-hardened-images:mainfrom
dylanmtaylor:feat/tailscale-operator

Conversation

@dylanmtaylor
Copy link
Copy Markdown

@dylanmtaylor dylanmtaylor commented May 10, 2026

This PR adds a hardened Tailscale Kubernetes Operator image and its corresponding Helm chart to the catalog.

Key Changes:

  • Hardened Image: Built using the DHI toolchain with CGO_ENABLED=0 for multi-arch compatibility (AMD64/ARM64) and minimal attack surface.
  • Hardened Chart: Packages the operator with hardened default values, including non-root security contexts (65532) and automatic image relocation to dhi.io.

@dylanmtaylor dylanmtaylor requested a review from a team as a code owner May 10, 2026 14:23
@dylanmtaylor dylanmtaylor changed the title feat: add hardened tailscale-operator with ARM64 fix feat: add hardened tailscale-operator May 10, 2026
@dylanmtaylor dylanmtaylor force-pushed the feat/tailscale-operator branch from fb7d911 to 672a609 Compare May 10, 2026 14:28
@dylanmtaylor dylanmtaylor marked this pull request as draft May 10, 2026 14:28
@dylanmtaylor dylanmtaylor force-pushed the feat/tailscale-operator branch from 152f188 to 8eb628c Compare May 10, 2026 14:30
@dylanmtaylor dylanmtaylor changed the title feat: add hardened tailscale-operator feat: add hardened tailscale-operator image and chart May 10, 2026
@dylanmtaylor dylanmtaylor force-pushed the feat/tailscale-operator branch from e593bcb to c76edc9 Compare May 10, 2026 15:01
@dylanmtaylor dylanmtaylor force-pushed the feat/tailscale-operator branch from 2ae8407 to 08804d5 Compare May 10, 2026 16:12
@LaurentGoderre
Copy link
Copy Markdown
Contributor

Thanks for submitting this. We are working on integrating this in the catalog.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants