Bootstrap Flow
Cloud-init script: Tailscale, containerd, kubelet, kubeadm join.
On first boot, the VM runs the embedded cloud-init script. Bootstrap steps (in order):
- Set hostname to the NodeClaim name
- Install and configure Tailscale (join tailnet using auth key from NodeClass secret)
- Install containerd, kubelet, kubeadm
- Configure kubelet to use Tailscale IP as node IP
- Run
kubeadm joinpointing at the control plane's Tailscale address
No long-lived agent; everything needed is in that one script.