feat(helm): update chart tailscale-operator to 1.66.3

[tinfoild[bot]]

This PR contains the following updates:

Package	Update	Change	OpenSSF
tailscale-operator	minor	1.61.11 -> 1.66.3

---

Release Notes

tailscale/tailscale (tailscale-operator)

v1.66.3

Compare Source

Changelog incoming shortly

v1.64.2

Compare Source

Windows

• Changed: Installers are now built using WiX toolchain version 3.14.1.

Synology

• Fixed: DiskStation Manager UI no longer freezes for a few minutes at startup when attempting to clean unused routes. This update is applicable to the version provided on pkgs.tailscale.com[^1].

[^1]: We initially noted this as being released in 1.64.1, but that package was not uploaded incorrectly, so 1.64.2 has the actual fix.

v1.64.1

Compare Source

Synology

• Fixed: No longer freezes for a few minutes at startup when attempting to clean unused routes

v1.64.0

Compare Source

All platforms

• Changed: tailscale serve headers are now RFC 2047 Q-encoded

macOS

• New: Access a new Internet Access Policy for Little Snitch users
• New: Receive alerts when an error occurs while changing client preferences
• New: Use Tailscale for macOS as a Tailscale SSH client (Standalone variant only)
• New: tailscale ssh and tailscale nc are now supported in the Standalone variant of the client.
• Changed: The .pkg installer no longer requires a system restart after installing the client (Standalone variant only)
• Fixed: Reduced number of alerts if the network extension terminates unexpectedly
• Fixed: Unexpected terminations for some macOS 10.15 Catalina users

iOS

• Fixed: Improved reliability of the ping chart presentation

Synology

• New: Update certificates using the configure synology-cert CLI command
• Fixed: IPv6 addresses are available again

Kubernetes operator

• New: tailscale configure kubeconfig now respects KUBECONFIG environment variable.
• Fixed: tailscale configure kubeconfig now works with partially empty kubeconfig.
• Fixed: MSS clamping for Kubernetes operator proxies using nftables.

Containers

• Fixed: Containers on hosts with partial support for ip6tables no longer crash.

v1.62.1

Compare Source

Linux

New: Send load balancing hint HTTP request header

Windows

Fixed: Do not allow msiexec to reboot the operating system

macOS

Issue that could cause the Tailscale system extension to not be installed upon app launch, when deploying Tailscale using MDM and using a configuration profile to pre-approve the VPN tunnel (applies to standalone variant only)

Synology

Fixed: IPv6 routing

Kubernetes operator

Fixed: Kubernetes operator proxies should not accept subnet routes

v1.62.0: 1.62.0

All platforms

• New: Web interface now uses ACL grants to manage access on tagged devices
• Changed: Tailscale SSH connections now disable unnecessary hostname canonicalization
• Changed: tailscale bugreport command for generating diagnostic logs now contain ethtool information
• Changed: Mullvad's family-friendly server is added to the list of well known DNS over HTTPS (DoH) servers
• Changed: DNS over HTTP requests now contain a timeout
• Changed: TCP forwarding attempts in userspace mode now have a per-client limit
• Changed: Endpoints with link-local IPv6 addresses is preferred over private addresses
• Changed: WireGuard logs are less verbose
• Changed: Go is updated to version 1.22.1
• Fixed: DERP server region no longer changes if connectivity to the new DERP region is degraded

Linux

• Changed: Auto-update version detection on Alpine Linux is improved
• Changed: IPv6 support detection in a container environment is improved
• Fixed: DNS configuration on Amazon Linux 2023 no longer causes an infinite loop

Windows

• Changed: ManagedByOrganizationName, ManagedByCaption, and ManagedByURL system policy keys are now supported
• Fixed: Tailscale Tunnel WinTun adapter handling is improved
• Fixed: MSI upgrades no longer ignore policy properties set during initial install

macOS

• New: A .pkg installer package is now available for the standalone release of the Tailscale client
• Changed: Taildrop notifications now include actions to reveal the received file in the Finder, or delete it
• Changed: Tailnet lock settings UI displays more information about the status, including key and public key trust status
• Changed: The onboarding flow now guides the user in enabling the Tailscale system extension
• Changed: Launch Tailscale at login settings item can now be toggled when the Tailscale client is disconnected
• Changed: DNS behavior is improved when handling transitions between network interfaces

iOS

• Changed: Battery usage is improved
• Changed: Taildrop notifications now include actions to reveal the received file in the Files app, or delete it
• Changed: Tailnet lock settings UI displays more information about the status, including key and public key trust status
• Changed: Unnecessary log messages are removed when triggered by changes to device power state and routing
• Changed: DNS behavior is improved when handling interface transitions between Wi-Fi and Cellular

Android

• Changed: Settings persist from previous sign-ins
• Changed: Always-on VPN handling is improved
• Changed: Custom control server is applied on first start

Kubernetes operator

• Changed: Ingress resource handling is improved when deployed before its backing Service resource
• Fixed: Destination NAT (DNAT) rule management by egress proxies in nftables mode when IP address of tailscale.com/tailnet-fqdn changes

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[tinfoild[bot]]

--- kube/deploy/core/_networking/tailscale/app Kustomization: flux-system/1-core-1-networking-tailscale-app HelmRelease: tailscale/tailscale

+++ kube/deploy/core/_networking/tailscale/app Kustomization: flux-system/1-core-1-networking-tailscale-app HelmRelease: tailscale/tailscale

@@ -12,13 +12,13 @@

     spec:
       chart: tailscale-operator
       sourceRef:
         kind: HelmRepository
         name: tailscale
         namespace: flux-system
-      version: 1.61.11
+      version: 1.64.2
   driftDetection:
     ignore:
     - paths:
       - /spec/replicas
     mode: warn
   install:

[cloudflare-workers-and-pages[bot]]

Deploying jjgadgets-biohazard with    Cloudflare Pages

Latest commit:	5b7822c
Status:	✅  Deploy successful!
Preview URL:	https://9e3451f6.jjgadgets-biohazard.pages.dev
Branch Preview URL:	https://renovate-tailscale-operator.jjgadgets-biohazard.pages.dev

View logs