CAPI Scaleway 0.4.0 is now available as ghcr.io/tuist/capi-provider-scaleway-applesilicon:0.4.0.
What’s new
- Mac mini runners now join a Tailscale tailnet automatically. This gives the cluster a private, encrypted path to reach macOS VMs and host metrics without exposing them on the public internet.
- The controller now maintains a Tailscale egress Service per Mac mini, so cluster scrapers can reach node-level metrics and VM Prometheus endpoints through the tailnet.
- New operator flags let you configure the Tailscale binaries, auth-key secret, tags, and egress proxy group. Leave the egress proxy group empty to keep the previous, non-tailnet behavior.
Fixes
- Fixed a bootstrap failure on macOS hosts where
pfctlreported tables as “Resource busy” during reloads. The bootstrap now removes persistedpftables before reloading rules, so retries succeed and the runner fleet returns to full capacity.