Tailscale Kubernetes Operator

The Tailscale Kubernetes Operator provides a Kubernetes-native way to ensure secure connectivity to and from your cluster using Tailscale.

Using the Kubernetes Operator lets you:

• Enable secure, private Kubernetes API access by exposing the Kubernetes control plane over your tailnet. Administrators and automation systems can manage clusters from anywhere without opening public endpoints, configuring VPNs, or maintaining complex network access controls.
• Connect devices in your tailnet to Kubernetes workloads (ingress) to provide secure access to applications and services running inside your clusters. Applications, developers, and end-users can securely reach workloads using Tailscale identities and policies.
• Connect Kubernetes workloads to other devices and services in your tailnet (egress) so applications running in the cluster can securely communicate with laptops, servers, databases, and cloud resources across your private network. This creates a unified connectivity layer without exposing services to the public internet.
• Route multi-cluster traffic across Kubernetes environments, regions, and cloud providers through your tailnet. Use cross-cluster communication, service-to-service connectivity, and hybrid deployments while maintaining consistent security policies and identity-based access controls.
• Record and audit Kubernetes sessions for compliance and security with detailed visibility into administrative activity. Capture session data, maintain audit trails, and support regulatory, governance, and forensic requirements with centralized recording and monitoring capabilities.
• Host Tailscale infrastructure components in Kubernetes, including session recorders, exit nodes, and subnet routers.

Explore the documentation

Find guides, concepts, and reference material for the Tailscale Kubernetes Operator.