https://rancher.com/ logo
Join Slack
Powered by
Hello! Is it possible to use tailscale on harvest...
# harvester
r
Hello! Is it possible to use tailscale on harvester nodes? I have some servers with public ips and no private network. I want to put them in one cluster but have the node-to-node traffic go over a tailscale interface instead of the regular public interface.
t
Are they bare metal? It is possible to route over tailscale. But I am fairly sure it won’t work well.
r
yeah, baremetal
they're in the same dc (for now) so mostly just wanting it to make sure I'm not exposing things to the internet that I shouldn't
t
Can you get private Nic’s? Due to how harvester boots getting Tailscale to work for all node to node is a very bad idea. You can absolutely run Tailscale from within the vms.
r
I might be able to, I asked the provider for pricing at least. What do you mean by how harvester boots?
t
Each boot the os gets rebuilt. Making persistent additions hard.
r
Ohh, gotcha. I saw there was a way to pass in cloud-init config for each node, and could include some commands there, but wasn't sure if that'd run early enough in the boot process or not
but I think tailscale would need a persistent directory to store its state in to at least keep the same ip
t
You should test it. Would be interesting to see it working.
r
I'llI give it a shot. I use the tailscale extension for Talos linux/k8s, so that's why I'm hoping I can do something similar with harvester 😄
t
Can you route all traffic for talos over tailnet?
r
Yep, talos basically sees the tailnet ip as the primary node ip so it builds the vxlan on top of it
t
Would be interesting. let me ask a eng I know.
according to a harvester eng, it is possible using the operator and updating 
/oem
configs
r
by operator, do you mean the operator that manages the cloudinit crd?
I was going to try modifying 
/oem
on a disk image directly, but if I can create a CR for it, that'd be even better
t
Tailscale operator.
r
Oh got it, I might test with it but I'm actually using headscale as the controller instead of tailscale itself. It doesn't support the tailscale operator yet because it's missing some of the apis
Open in Slack
PreviousNext
Powered by