You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Irbe Krumina d86d1e7601 cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter for egress proxies. (#12075) ... Turn off stateful filtering for egress proxies to allow cluster traffic to be forwarded to tailnet. Allow configuring stateful filter via tailscaled config file. Deprecate EXPERIMENTAL_TS_CONFIGFILE_PATH env var and introduce a new TS_EXPERIMENTAL_VERSIONED_CONFIG env var that can be used to provide containerboot a directory that should contain one or more tailscaled config files named cap-<tailscaled-cap-version>.hujson. Containerboot will pick the one with the newest capability version that is not newer than its current capability version. Proxies with this change will not work with older Tailscale Kubernetes operator versions - users must ensure that the deployed operator is at the same version or newer (up to 4 version skew) than the proxies. Updates tailscale/tailscale#12061 Signed-off-by: Irbe Krumina <irbe@tailscale.com> Co-authored-by: Maisem Ali <maisem@tailscale.com>		1 week ago
..
conffile	ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key	7 months ago
ipnauth	go.mod, all: move away from inet.af domain seized by Taliban	3 months ago
ipnlocal	ipnlocal, magicsock: add more description to storing last suggested exit (#11998)	1 week ago
ipnserver	ipn/ipnserver: close a small race in ipnserver, ~simplify code	1 week ago
ipnstate	cmd/tailscale,controlclient,ipnlocal: fix 'up', deflake tests more	1 week ago
localapi	ipn/ipnlocal, all: plumb health trackers in tests	1 week ago
policy	ipn,tailconfig: clean up unreleased and removed app connector service	6 months ago
store	cmd/containerboot,kube,ipn/store/kubestore: allow interactive login on kube, check Secret create perms, allow empty state Secret (#11326)	3 weeks ago
backend.go	ipn: remove unused Options.LegacyMigrationPrefs	1 month ago
conf.go	cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter for egress proxies. (#12075)	1 week ago
doc.go	all: update copyright and license headers	1 year ago
ipn_clone.go	various: implement stateful firewalling on Linux (#12025)	2 weeks ago
ipn_test.go	net/packet: split off checksum munging into different pkg	7 months ago
ipn_view.go	various: implement stateful firewalling on Linux (#12025)	2 weeks ago
prefs.go	ipn/ipnlocal: set default NoStatefulFiltering in ipn.NewPrefs (#12031)	1 week ago
prefs_test.go	ipn/ipnlocal: set default NoStatefulFiltering in ipn.NewPrefs (#12031)	1 week ago
serve.go	all: deprecate Node.Capabilities (more), remove PeerChange.Capabilities [capver 89]	2 months ago
serve_test.go	{ipn/serve,cmd/tailscale/cli}: move some shared funcs to ipn	2 months ago
store.go	ipn: add comment about thread-safety to StateStore	2 months ago
store_test.go	ipn: avoid useless no-op WriteState calls	9 months ago