From 5df379f2864aa643e43d4b52d348d25856fa7074 Mon Sep 17 00:00:00 2001
From: 0x7fffff92 <40755502+0x7fffff92@users.noreply.github.com>
Date: Mon, 30 Jun 2025 21:02:26 +0800
Subject: [PATCH] feat(headscale): let headscale run on the master node like
 l4-bfl-proxy (#1498)

Co-authored-by: 0x7fffff92 <0x7fffff92@example.com>
---
 .../headscale/templates/headscale_deploy.yaml        | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/framework/headscale/.olares/config/user/helm-charts/headscale/templates/headscale_deploy.yaml b/framework/headscale/.olares/config/user/helm-charts/headscale/templates/headscale_deploy.yaml
index 04af45c7e..7f72c3b1e 100644
--- a/framework/headscale/.olares/config/user/helm-charts/headscale/templates/headscale_deploy.yaml
+++ b/framework/headscale/.olares/config/user/helm-charts/headscale/templates/headscale_deploy.yaml
@@ -85,6 +85,18 @@ spec:
       labels:
         app: headscale
     spec:
+      affinity:
+        nodeAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+          - preference:
+              matchExpressions:
+              - key: kubernetes.io/os
+                operator: In
+                values:
+                - linux
+              - key: node-role.kubernetes.io/master
+                operator: Exists
+            weight: 10
       serviceAccountName: tailscale
       securityContext:
         runAsUser: 1000