You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Tom Proctor 711698f5a9
cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)
Previously, the operator checked the ProxyGroup status fields for
information on how many of the proxies had successfully authed. Use
their state Secrets instead as a more reliable source of truth.

containerboot has written device_fqdn and device_ips keys to the
state Secret since inception, and pod_uid since 1.78.0, so there's
no need to use the API for that data. Read it from the state Secret
for consistency. However, to ensure we don't read data from a
previous run of containerboot, make sure we reset containerboot's
state keys on startup.

One other knock-on effect of that is ProxyGroups can briefly be
marked not Ready while a Pod is restarting. Introduce a new
ProxyGroupAvailable condition to more accurately reflect
when downstream controllers can implement flows that rely on a
ProxyGroup having at least 1 proxy Pod running.

Fixes #16327

Change-Id: I026c18e9d23e87109a471a87b8e4fb6271716a66

Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>
6 months ago
..
addlicense all: fix golangci-lint errors 11 months ago
build-webclient
checkmetrics cmd/checkmetrics: add command for checking metrics against kb 1 year ago
cloner scripts/check_license_headers.sh: delete, rewrite as a Go test 6 months ago
connector-gen
containerboot cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 6 months ago
derper derp/derphttp: add error notify for RunWatchConnectionLoop (#16261) 6 months ago
derpprobe cmd/{derp,derpprobe},prober,derp: add mesh support to derpprobe (#15414) 6 months ago
dist cmd/dist,release/dist: sign QNAP builds with a Google Cloud hosted key 8 months ago
get-authkey cmd,tsnet,internal/client: create internal shim to deprecated control plane API 10 months ago
gitops-pusher scripts/check_license_headers.sh: delete, rewrite as a Go test 6 months ago
hello cmd/hello: display native ipv4 (#15191) 10 months ago
k8s-nameserver cmd/k8s-nameserver: fix AAAA record query response (#12412) 2 years ago
k8s-operator cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 6 months ago
mkmanifest
mkpkg
mkversion
nardump cmd/nardump: support symlinks, add basic test 8 months ago
natc cmd/natc: add a flag to use specific DNS servers 6 months ago
netlogfmt
nginx-auth
pgproxy all: use new LocalAPI client package location 10 months ago
printdep
proxy-test-server net/tlsdial: fix TLS cert validation of HTTPS proxies 6 months ago
proxy-to-grafana scripts/check_license_headers.sh: delete, rewrite as a Go test 6 months ago
sniproxy net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl 8 months ago
speedtest
ssh-auth-none-demo ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh 11 months ago
stunc cmd/stunc: enforce read timeout deadline (#14309) 1 year ago
stund tsweb/varz: export GC CPU fraction gauge 8 months ago
stunstamp cmd/stunstamp: add protocol context to timeout logs (#13422) 1 year ago
sync-containers
systray cmd/systray: add cmd/systray back as a small client/systray wrapper 11 months ago
tailscale cmd/tailscale: use text format for TKA head 6 months ago
tailscaled ipn/store: automatically migrate between plaintext and encrypted state (#16318) 6 months ago
testcontrol
testwrapper .github/workflows: shard the Windows builder 6 months ago
tl-longchain all: use new LocalAPI client package location 10 months ago
tsconnect ipn/store: automatically migrate between plaintext and encrypted state (#16318) 6 months ago
tsidp cmd/tsidp: fix OIDC client persistence across restarts 6 months ago
tsshd
tta all: use new LocalAPI client package location 10 months ago
viewer cmd/viewer,all: consistently use "read-only" instead of "readonly" 11 months ago
vnet cmd/vnet: add wsproxy mode 9 months ago
xdpderper tsweb: split promvarz into an optional dependency 9 months ago