refactor: extract tailscale to overlay

deploy/Makefile

@@ -1,4 +1,4 @@
-.PHONY: dev prod prod-ovh cert-manager inflate
+.PHONY: dev prod prod-ovh cert-manager tailscale-operator inflate
 
 dev:
 	@kubectl kustomize --enable-helm dev
@@ -14,6 +14,9 @@ prod-ovh:
 cert-manager:
 	@kubectl kustomize --enable-helm cert-manager
 
+tailscale-operator:
+	@kubectl kustomize --enable-helm tailscale-operator
+
 load-prod-env:
 	$(eval include prod/secrets/env)
 	$(eval export)

deploy/prod-ovh/kustomization.yaml

@@ -27,21 +27,9 @@ resources:
 - inflated/prometheus/templates/clusterrolebinding.yaml
 - inflated/prometheus/templates/pvc.yaml
 
-# Tailscale
-- inflated/tailscale-operator/templates/apiserverproxy-rbac.yaml
-- inflated/tailscale-operator/templates/connector.yaml
-- inflated/tailscale-operator/templates/deployment.yaml
-- inflated/tailscale-operator/templates/dnsconfig.yaml
-- inflated/tailscale-operator/templates/ingressclass.yaml
-- inflated/tailscale-operator/templates/oauth-secret.yaml
-- inflated/tailscale-operator/templates/operator-rbac.yaml
-- inflated/tailscale-operator/templates/proxy-rbac.yaml
-- inflated/tailscale-operator/templates/proxyclass.yaml
-- inflated/tailscale-operator/templates/proxygroup.yaml
-- inflated/tailscale-operator/templates/recorder.yaml
-
 - clusterissuer.yaml
 - cert-ingress-tls.yaml
+- svc-db.yaml
 - ingress.yaml
 
 configMapGenerator:

deploy/prod-ovh/svc-db.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    tailscale.com/tailnet-fqdn: db.tail6afe.ts.net
+  name: db
+spec:
+  externalName: 1401ba39-3eeb-4633-b727-bf5d3028da8c
+  type: ExternalName

deploy/tailscale-operator/kustomization.yaml

@@ -0,0 +1,14 @@
+---
+# Important: namePrefix must be blank.
+resources:
+- inflated/tailscale-operator/templates/apiserverproxy-rbac.yaml
+- inflated/tailscale-operator/templates/proxyclass.yaml
+- inflated/tailscale-operator/templates/ingressclass.yaml
+- inflated/tailscale-operator/templates/proxy-rbac.yaml
+- inflated/tailscale-operator/templates/operator-rbac.yaml
+- inflated/tailscale-operator/templates/deployment.yaml
+- inflated/tailscale-operator/templates/oauth-secret.yaml
+- inflated/tailscale-operator/templates/proxygroup.yaml
+- inflated/tailscale-operator/templates/dnsconfig.yaml
+- inflated/tailscale-operator/templates/recorder.yaml
+- inflated/tailscale-operator/templates/connector.yaml