IPv6 support for the Tailscale Kubernetes Operator

Last validated:

The following summarizes IPv6 support for each proxy mode.

Singleton proxy

FeatureIPv6 supportCluster requirement
IngressSupportedDual-stack cluster required to expose Kubernetes Services over both IPv4 and IPv6 ClusterIPs.
EgressSupportedNone
API Server ProxySupportedNone

ProxyGroup

FeatureIPv6 supportCluster requirement
IngressSupportedDual-stack cluster required to expose Kubernetes Services over both IPv4 and IPv6 ClusterIPs.
EgressNot supportedIPv4 only. IPv6 tailnet targets are not supported. The cluster must assign IPv4 addresses to pods.
API Server ProxySupportedNone

Pods cannot reach tailnet devices by raw Tailscale IPv6 address (fd7a:... / 4via6). Use MagicDNS names or IPv4 addresses instead.