Background
Kubernetes 1.33 graduated native sidecar containers to GA. Sidecars now have proper lifecycle management: they start before app containers, persist throughout the pod's life, and terminate last.
Current State
- Tailscale runs as a system extension on each node (configured in talconfig.yaml)
- Some workloads may use init containers for setup tasks that would benefit from sidecar semantics
Opportunity
- Tailscale operator could use native sidecars for per-pod Tailscale proxies (if needed)
- Logging/monitoring sidecars get proper lifecycle — no more premature termination
- Service mesh integration simplified
Action
Review workloads that currently use init containers or multi-container pods that would benefit from native sidecar lifecycle semantics.
Background
Kubernetes 1.33 graduated native sidecar containers to GA. Sidecars now have proper lifecycle management: they start before app containers, persist throughout the pod's life, and terminate last.
Current State
Opportunity
Action
Review workloads that currently use init containers or multi-container pods that would benefit from native sidecar lifecycle semantics.