---
title: Charmhub | Deploy Tailscale K8s Operator using Charmhub - The Open Operator
  Collection
description: Deploy the latest version of Tailscale K8s Operator as a Kubernetes Operator
  on any cloud.
url: https://charmhub.io/tailscale-k8s/configurations
---

# Tailscale K8s Operator

[Dylan Stephano-Shachter](https://charmhub.io/publisher/dylanstathis "View all packages from Dylan Stephano-Shachter")

* [Dylan Stephano-Shachter](https://charmhub.io/publisher/dylanstathis "View all packages from Dylan Stephano-Shachter")

Platform:

1.x/candidate 4

```
juju deploy tailscale-k8s --channel 1.x/candidate
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [credentials](https://charmhub.io/tailscale-k8s/configurations#credentials)
* [login-server](https://charmhub.io/tailscale-k8s/configurations#login-server)
* [operator-tags](https://charmhub.io/tailscale-k8s/configurations#operator-tags)
* [proxy-tags](https://charmhub.io/tailscale-k8s/configurations#proxy-tags)

[Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration)

* credentials | secret

  Juju secret containing OAuth client credentials for manual mode.
  The secret must contain 'client-id' and 'client-secret' fields.
  Mutually exclusive with the tailscale-credentials relation - if both
  are present, the charm blocks.
* login-server | string

  URL of the Tailscale control plane. Leave empty for Tailscale SaaS
  (https://controlplane.tailscale.com). Set to the Headscale URL for
  Headscale deployments (e.g. https://headscale.example.com).
* operator-tags | string

  Default: tag:k8s-operator

  Comma-separated list of tags to apply to the operator device.
  These tags are applied via OPERATOR\_INITIAL\_TAGS env var.
  The credential must carry these tags for the operator to authenticate.
* proxy-tags | string

  Default: tag:k8s

  Comma-separated list of tags to apply to proxy pods.
  These tags are applied via PROXY\_TAGS env var.
  The operator tag must own these tags in tagOwners for proxy auth to succeed.