k8s: Expose a Tailscale Secret on job pods

element-hq · Feb 1, 2024 · d0b4d61 · d0b4d61
1 parent 7522e3f
commit d0b4d61
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/packages/k8s/src/hooks/prepare-job.ts b/packages/k8s/src/hooks/prepare-job.ts
@@ -205,6 +205,7 @@ export function createContainerSpec(
   const request_memory = process.env.ACTIONS_POD_RESOURCE_REQUEST_MEMORY
   const request_cpu = process.env.ACTIONS_POD_RESOURCE_REQUEST_CPU
   const imagePullPolicy = process.env.ACTIONS_POD_IMAGE_PULL_POLICY
+  const tailscaleAuthSecret = process.env.ACTIONS_POD_TAILSCALE_SECRET
   resources.requests = {
     ...(request_cpu != undefined) && {cpu: request_cpu},
     ...(request_memory != undefined) && {memory: request_memory},
@@ -240,6 +241,9 @@ export function createContainerSpec(
       podContainer.env.push({ name: key, value: value as string })
     }
   }
+  if (tailscaleAuthSecret != undefined){
+    podContainer.env.push({ name: "AUTH_KEY", value: tailscaleAuthSecret })
+  }
 
   podContainer.volumeMounts = containerVolumes(
     container.userMountVolumes,