service: Support connecting containers to tailscale network

roles/service/meta/argument_specs.yaml

@@ -377,6 +377,23 @@ argument_specs:
         type: bool
         required: false
         default: false
+      service_tailscale:
+        description: >-
+          Whether to install tailscale in a container and have the service container use its
+          network. This will make the container accessible over tailscale.
+        type: bool
+        required: false
+        default: false
+      service_tailscale_login_server:
+        description: Tailscale login server. Required if tailscale is enabled.
+        type: str
+        required: false
+        default: ""
+      service_tailscale_apikey:
+        description: Tailscale API key. Required if tailscale is enabled.
+        type: str
+        required: false
+        default: ""
 
       service_additional_containers:
         description:
@@ -592,6 +609,13 @@ argument_specs:
             type: str
             required: false
             default: ""
+          tailscale:
+            description: >-
+              Whether to install tailscale in a container and this container use its
+              network. This will make the container accessible over tailscale.
+            type: bool
+            required: false
+            default: false
           secrets:
             description:
               - >