fix(headplane): Use 0.6.2 beta for 0.28 headscale support

Author: eaglesemanation

k8s/apps/network/headscale/acl.jsonc

@@ -17,6 +17,9 @@
         "exitNode": [
             "tag:exit-node"
         ],
+        "routes": {
+            "192.168.25.0/23": ["tag:emnt-router"],
+        },
     },
     "acls": [
         {

k8s/apps/network/headscale/deployment.k8s.yaml

@@ -106,7 +106,7 @@ spec:
     spec:
       containers:
         - name: headplane
-          image: ghcr.io/tale/headplane:0.6.1
+          image: ghcr.io/tale/headplane:0.6.2-beta.5
           resources:
             requests:
               cpu: 100m

k8s/apps/network/headscale/headplane-config.yaml

@@ -188,7 +188,7 @@ oidc:
   # The authentication method to use when communicating with the token endpoint.
   # This is fully optional and Headplane will attempt to auto-detect the best
   # method and fall back to `client_secret_basic` if unsure.
-  token_endpoint_auth_method: "client_secret_basic"
+  #token_endpoint_auth_method: "client_secret_basic"
 
   # The client ID for the OIDC client
   # For the best experience please ensure this is *identical* to the client_id

k8s/apps/network/headscale/secrets.sops.yaml

@@ -4,40 +4,40 @@ metadata:
     name: headscale
     namespace: headscale
 stringData:
-    oidc_client_id: ENC[AES256_GCM,data:Cd/GW/6SW22kUM1ek80SjxJg7S2yRZA5tdynwhmgAqDdGOP3pWW8Nw==,iv:GDviSFKZYiK+sc/oH+RYqkSZL+IrUGRsOpxdKEauwAk=,tag:rOwWj06DC/4jFfmE2+vYuQ==,type:str]
-    oidc_secret_key: ENC[AES256_GCM,data:unJUa9vAHWB8hmjGbRz5hY5oO6HnHdnK9vY46+eIF8TiwHkYIXsEoObM4kdVhwvwMc06Oyz4WHeegASfFvfhW425wpm3IH7zFsA3IJIh7IAalvCLMHU2Pn+CAMKC55OyfyuyB+h4MBG5NguNLFmcPfG9nwgmSnNw8seEJKiVAJg=,iv:uylUV8y91lVjpED7hheJXA3oKdOs51K/4O8zvlSed8w=,tag:AkiedpluMHaVnO6n0z+awA==,type:str]
+    oidc_client_id: ENC[AES256_GCM,data:/U+2nO/BBt26bfi7QC0eDKHzKyQoSqLVYnYvrLQaO0grZwJ3GAdY7Q==,iv:lGYKe3oBYPahup6gS28uRQ3I4eZhy8kYnQySYt6Qc7M=,tag:bYuFUerkyP6NaVIMvGiTAA==,type:str]
+    oidc_secret_key: ENC[AES256_GCM,data:M67ofHY551oLAkGrWI6by/YNjZwHb1XGS9rs7q14TE99ybbYESYLx03j+vggzNaeOPNX4CvLU28DZkokpGDDz3zXKpfbvG8bGl7fhI3YbeSp7hnTrdUxDLcCfuu/Pky65opkSq1k1fTLbrBh0iq86Ja3hNsmUZyb1JifoFFRizc=,iv:9fNpKrXX90Ohn4SFcbxwUH7uMqu5diuxvJb3toxvlm0=,tag:paFD30ARLFMY9kaHpGGp5w==,type:str]
 sops:
     age:
         - recipient: age1exncnhces66v0uc67xm009v2d2237hgdxtaa8tdy0hvusexjry0qye4ad2
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2dEx3cmFXU3EzWDZTMUJ2
-            cWpkcldLOWg1OVNmdDBKOTVtSVBUMzhDTnlrCjBqbU94bjhuZEFtMUpxd2FUaG1s
-            QVBlQnZIS0VLVUtZWXdFYkdlQ3gxSFUKLS0tIGxwOE5lVkhKTnpHZS9NM3o5dXZM
-            cmRVV3NpWC9TTS9RMTZzNU51Wi9vN2cKzqFSntQ0ut7fKos+CHywTE9/A/OBqj3N
-            istV8UwSDuOSR4bYIv42ABYXS2baMUTEPYEo5jY1fNtqyj7Oe5oDzQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLL1dQN0JKZU9oWEMvdEFF
+            WWRsTUdkN3NiUG5UT1lobXFuMG9MUWtmZzNjCnlRTFRaOFR5Wko2akVRR3VIYnJv
+            OVErSUhlSWd5UkpJOG1hc2NZOS8wQkEKLS0tIGYvQ0FSd1pqcUwzbVlYaEpkbzV0
+            R1diOG9JUFh3NkhOU2o0VkZUZlhwN1EKfzHaVHHgWIgfB8i2iDduEeln7iw1Trqy
+            /QV0nJ8seP8R/ntHziGdkeW/fc+hg0oLdw2zaALrYYvLdSyyBI4DHg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-02-22T06:48:14Z"
-    mac: ENC[AES256_GCM,data:BDM3C+FoVRn89kt8q+U7UbpwA7skiyO6cz6rjGt3Bi0VL6RfJakKhtBggtwO3h7BmH0ouBgU9mQj5f65VLQEIRLfu0RGtfmxF04XHEvSJOqodt1EhTS7ChOR/hZnzuuFZgUDn+m1tGTOURy6yHzWhDje0h1CNiTfcQ564dUqJtM=,iv:FYE5lxbIdPFLxHy06f/PEYpb7kJXFbTcKZ9Hcnx4AIE=,tag:hPg+ys3Jm8vBZaTD1SHrgg==,type:str]
+    lastmodified: "2026-02-22T08:57:07Z"
+    mac: ENC[AES256_GCM,data:J2SZvtWTmUktP6pnKLpQuwONLtq6J2rYS9tfBygegyzx1KsqtmNEhxqvt72kmQTkZaQAeBMfv4Jhlu06XSaJE8e63XF2P6CYM6eJGkv/SfpRh1wrFcGbqF75K713Gd5Zm2WjhiRG4V/hmfKnlD+kWEBytQGTibWZESkw+88wt0c=,iv:K74jTdqvpO2mn5utsNlCygw4q1LZ4zppiurXgnKf+MY=,tag:bPwX1/V3aNT185lWkBWm3A==,type:str]
     pgp:
-        - created_at: "2026-02-22T06:48:14Z"
+        - created_at: "2026-02-22T08:57:07Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwVH6sRf6ijOAQ//V0n2ZAW4fRZiSP5OCC5CSAk/+IHlwenOXUe5dcJVUilH
-            xhhv+xTIczClwnn46IzTG320vCTtLBuXNfRGrVwEd7r+TIaEcuSmCHWWPSGPE9It
-            slg66c01iH1m4Y6OMZDcUtSbPYKdduM+2nGqxtVXyjoi9furqzOn6+ErGb/PGLEA
-            TiUY8sN/3GWmR1+Xx0Jt1+AqYpP1Jgl3/BOhrXuSfxkf25+KPAn5kdwto71BODX1
-            zZWeRjQqvV4GmvsUUUc4ci3xpRebWf2ctTDnX5jC1p3GlR0kmpKan/jF3h6vxYKY
-            7wHI/Q3tvWtOAKTHKBME8Hh/Sx289yo9TSSjOh6+fGgKVKBHLG0dv+32lfEf/0B4
-            VKREUkMtD8gSRx/gxd4xn9rwdPaypK/Vubv5cnGHSSb2/0Sn6lvyDZRE9ppLTCcv
-            Ws80+UCE0mvvHrgBvGRMhA8wAfJEDqHKr3dgrq/C6QIl74lsRsQN+/RZnfVucO71
-            DLzlzoVoCarqcBdrffl0/wwWQpMCx94J8GJCVZhkMkjB0MRgQyks5yq3B5P3fuK0
-            HyizyK+mqnSGhYu77Xn5NjnpsEcP6q68AsvgVYiANfPzmJ0lUXpp+riXmrIgQYrI
-            C840/43/Hpc3XaQybscYhdIazu2jNmHvzBe57koyox1wW+0eDJEDw/rpg6ZumAvS
-            XgGjh47oB9pomMVpvfUOYS1kNfWiYlZOJ2Ka/hTIZsuSI81BGe7aKuKobfeo5PjQ
-            04WIJ6KhODoIQNqqth7PeJYLlqXs/ZQYva/jpvtbMM2G+87JeuIPeBcq7N26IMU=
-            =yE+J
+            hQIMAwVH6sRf6ijOAQ//dR4VXiPsEXt+X2+nQvn0OMz7AdRMcJosddY9wTFXyAx2
+            4Lem+iuz8JgdXeyErG+WSfChYkYiVHKTGOeuIhMSkvMaZgpWlBBcFT4XsBssIbwm
+            NJuUmtJ8h3MkBZRkMZNOXWuf/rZQih7rSHs6Laxs+b1uO8McOcBluaGBjvE8h1jk
+            Teomy8DqP6S8AU0Jx6Istw4AbYqzmgY+zGI9vCp4/cAiHAiYz4IxcbV4HOCptyr3
+            kE9dsme6cbsQxKktmwDvMuzpYdeA/pME4HZ3it6umwCjFoDTUFf3kWB8gTkhGOOR
+            +ssbdu52T+9SuCgZzYJLsEWF/b/SwuBaSqd1Uzb3bYvYNR3qQ8U+CnvNkK69oH2p
+            OHGXQ1v2eyCnVC6uFKB61mUJYWgHpQkEhDtdy6P7sjDnVfkIE9/ChKNU3QW91fAg
+            Wo8Miv/2x9siOTG0ne+PEUyeDkhkN9q1ZSLj82wGH9il2hIwEkiofCiYG3Nyn0YC
+            +uu261iMA3NV6vdNPhx9pl4XLkHqqDtwFcswhocXAMST/fs/YYIpVq9qQlh3htv3
+            BEDaYKCJk6iU8zSQtfqfmROmxjVqWGeoW+W1SIVdI7sTokj4S0THFWWiEt64cZKK
+            4yLkhZJT6d44+V+L/myBwwf4sywnjQd0d7db4xlClCljET3TzKZafBl6JfZQvg/S
+            XgGFUQz9eFMkytKHfO81C4HT8wsVZm3Zgh7HzolNps76Jq6UXEzv2zzJ/my0BgeB
+            8lpWawskxK60HVI/NFDPb7TxfKuedFPzusX1ZSlfmYkX8zlfEuCfmvBwBphD3Fo=
+            =YEty
             -----END PGP MESSAGE-----
           fp: C5B9ADB07DBE5A2E
     encrypted_regex: ^(data|stringData|crowdsecLapiKey)$
@@ -49,40 +49,40 @@ metadata:
     name: headplane
     namespace: headscale
 stringData:
-    headscale_api_key: ENC[AES256_GCM,data:NoAjQCZhKaPBdE+DddDwFQGv12cQOuxTlFsL2nHxGELIavPVPkyOLBhZZhW2c5gSwN46z8EA5Ga+8jQkhOoCJP/YDObtFedMKF04nPjiOuNW9qshxYap,iv:shSr2VBUk55DQUFmIHo69L++fVGPK6hwgGfrAtNPI70=,tag:dhihTdCbNVSWBLQmtlxUCg==,type:str]
-    headscale_preauth_key: ENC[AES256_GCM,data:gWxIrd1st6Wgxu0cHFT4+63NZSoKv3fQJ2qWWAmCt24teN253cAs+YQB1InX61aAZ9mz++aRYbJ1akGEJ+2qhPpJcVJz523kPZJV1APKqNfAepLZHxFhgQ==,iv:gfgeQyQn2nkrSgJ/wBLDFPP5gTHLURI1GI17G5TkaII=,tag:4dTIctTpFBQflpifdpFPhA==,type:str]
+    headscale_api_key: ENC[AES256_GCM,data:7iJBD7xEJJBbCvpU+coFdUw6Wwew64K2dx+40QbD9XDdhwrmol/mEB8XthLVNFgOjHSG/0MrLaFIJ7DtInA6XWq+1NwbyAAgToh9pBHwn387HgNfYtF+,iv:zHFPDX2DtxlOqmAgYkzep29D9W6IdoeaqoEiaQarvEs=,tag:shEkrCsx2Bnf8fQ3KIv0AQ==,type:str]
+    headscale_preauth_key: ENC[AES256_GCM,data:meGFZVBwu6gpqVfV7z2mYSylI4m4MbNrg0Uh7OXOfFZAvUU/P5EScHcB6fW3ZXYKmOAGE133FnJAd9aZjRlniJQxb3+m9nZ6TMpUd2crTK8dd2leFzP6bA==,iv:ShaPhjAr8xy1JYFTOUZehUXU1G4y2a+NZwzbRtHIVcs=,tag:22nUhA3O45GoRo01QT4CnQ==,type:str]
 sops:
     age:
         - recipient: age1exncnhces66v0uc67xm009v2d2237hgdxtaa8tdy0hvusexjry0qye4ad2
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2dEx3cmFXU3EzWDZTMUJ2
-            cWpkcldLOWg1OVNmdDBKOTVtSVBUMzhDTnlrCjBqbU94bjhuZEFtMUpxd2FUaG1s
-            QVBlQnZIS0VLVUtZWXdFYkdlQ3gxSFUKLS0tIGxwOE5lVkhKTnpHZS9NM3o5dXZM
-            cmRVV3NpWC9TTS9RMTZzNU51Wi9vN2cKzqFSntQ0ut7fKos+CHywTE9/A/OBqj3N
-            istV8UwSDuOSR4bYIv42ABYXS2baMUTEPYEo5jY1fNtqyj7Oe5oDzQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLL1dQN0JKZU9oWEMvdEFF
+            WWRsTUdkN3NiUG5UT1lobXFuMG9MUWtmZzNjCnlRTFRaOFR5Wko2akVRR3VIYnJv
+            OVErSUhlSWd5UkpJOG1hc2NZOS8wQkEKLS0tIGYvQ0FSd1pqcUwzbVlYaEpkbzV0
+            R1diOG9JUFh3NkhOU2o0VkZUZlhwN1EKfzHaVHHgWIgfB8i2iDduEeln7iw1Trqy
+            /QV0nJ8seP8R/ntHziGdkeW/fc+hg0oLdw2zaALrYYvLdSyyBI4DHg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-02-22T06:48:14Z"
-    mac: ENC[AES256_GCM,data:BDM3C+FoVRn89kt8q+U7UbpwA7skiyO6cz6rjGt3Bi0VL6RfJakKhtBggtwO3h7BmH0ouBgU9mQj5f65VLQEIRLfu0RGtfmxF04XHEvSJOqodt1EhTS7ChOR/hZnzuuFZgUDn+m1tGTOURy6yHzWhDje0h1CNiTfcQ564dUqJtM=,iv:FYE5lxbIdPFLxHy06f/PEYpb7kJXFbTcKZ9Hcnx4AIE=,tag:hPg+ys3Jm8vBZaTD1SHrgg==,type:str]
+    lastmodified: "2026-02-22T08:57:07Z"
+    mac: ENC[AES256_GCM,data:J2SZvtWTmUktP6pnKLpQuwONLtq6J2rYS9tfBygegyzx1KsqtmNEhxqvt72kmQTkZaQAeBMfv4Jhlu06XSaJE8e63XF2P6CYM6eJGkv/SfpRh1wrFcGbqF75K713Gd5Zm2WjhiRG4V/hmfKnlD+kWEBytQGTibWZESkw+88wt0c=,iv:K74jTdqvpO2mn5utsNlCygw4q1LZ4zppiurXgnKf+MY=,tag:bPwX1/V3aNT185lWkBWm3A==,type:str]
     pgp:
-        - created_at: "2026-02-22T06:48:14Z"
+        - created_at: "2026-02-22T08:57:07Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwVH6sRf6ijOAQ//V0n2ZAW4fRZiSP5OCC5CSAk/+IHlwenOXUe5dcJVUilH
-            xhhv+xTIczClwnn46IzTG320vCTtLBuXNfRGrVwEd7r+TIaEcuSmCHWWPSGPE9It
-            slg66c01iH1m4Y6OMZDcUtSbPYKdduM+2nGqxtVXyjoi9furqzOn6+ErGb/PGLEA
-            TiUY8sN/3GWmR1+Xx0Jt1+AqYpP1Jgl3/BOhrXuSfxkf25+KPAn5kdwto71BODX1
-            zZWeRjQqvV4GmvsUUUc4ci3xpRebWf2ctTDnX5jC1p3GlR0kmpKan/jF3h6vxYKY
-            7wHI/Q3tvWtOAKTHKBME8Hh/Sx289yo9TSSjOh6+fGgKVKBHLG0dv+32lfEf/0B4
-            VKREUkMtD8gSRx/gxd4xn9rwdPaypK/Vubv5cnGHSSb2/0Sn6lvyDZRE9ppLTCcv
-            Ws80+UCE0mvvHrgBvGRMhA8wAfJEDqHKr3dgrq/C6QIl74lsRsQN+/RZnfVucO71
-            DLzlzoVoCarqcBdrffl0/wwWQpMCx94J8GJCVZhkMkjB0MRgQyks5yq3B5P3fuK0
-            HyizyK+mqnSGhYu77Xn5NjnpsEcP6q68AsvgVYiANfPzmJ0lUXpp+riXmrIgQYrI
-            C840/43/Hpc3XaQybscYhdIazu2jNmHvzBe57koyox1wW+0eDJEDw/rpg6ZumAvS
-            XgGjh47oB9pomMVpvfUOYS1kNfWiYlZOJ2Ka/hTIZsuSI81BGe7aKuKobfeo5PjQ
-            04WIJ6KhODoIQNqqth7PeJYLlqXs/ZQYva/jpvtbMM2G+87JeuIPeBcq7N26IMU=
-            =yE+J
+            hQIMAwVH6sRf6ijOAQ//dR4VXiPsEXt+X2+nQvn0OMz7AdRMcJosddY9wTFXyAx2
+            4Lem+iuz8JgdXeyErG+WSfChYkYiVHKTGOeuIhMSkvMaZgpWlBBcFT4XsBssIbwm
+            NJuUmtJ8h3MkBZRkMZNOXWuf/rZQih7rSHs6Laxs+b1uO8McOcBluaGBjvE8h1jk
+            Teomy8DqP6S8AU0Jx6Istw4AbYqzmgY+zGI9vCp4/cAiHAiYz4IxcbV4HOCptyr3
+            kE9dsme6cbsQxKktmwDvMuzpYdeA/pME4HZ3it6umwCjFoDTUFf3kWB8gTkhGOOR
+            +ssbdu52T+9SuCgZzYJLsEWF/b/SwuBaSqd1Uzb3bYvYNR3qQ8U+CnvNkK69oH2p
+            OHGXQ1v2eyCnVC6uFKB61mUJYWgHpQkEhDtdy6P7sjDnVfkIE9/ChKNU3QW91fAg
+            Wo8Miv/2x9siOTG0ne+PEUyeDkhkN9q1ZSLj82wGH9il2hIwEkiofCiYG3Nyn0YC
+            +uu261iMA3NV6vdNPhx9pl4XLkHqqDtwFcswhocXAMST/fs/YYIpVq9qQlh3htv3
+            BEDaYKCJk6iU8zSQtfqfmROmxjVqWGeoW+W1SIVdI7sTokj4S0THFWWiEt64cZKK
+            4yLkhZJT6d44+V+L/myBwwf4sywnjQd0d7db4xlClCljET3TzKZafBl6JfZQvg/S
+            XgGFUQz9eFMkytKHfO81C4HT8wsVZm3Zgh7HzolNps76Jq6UXEzv2zzJ/my0BgeB
+            8lpWawskxK60HVI/NFDPb7TxfKuedFPzusX1ZSlfmYkX8zlfEuCfmvBwBphD3Fo=
+            =YEty
             -----END PGP MESSAGE-----
           fp: C5B9ADB07DBE5A2E
     encrypted_regex: ^(data|stringData|crowdsecLapiKey)$