You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Irbe Krumina 19b31ac9a6 cmd/{k8s-operator,k8s-nameserver},k8s-operator: update nameserver config with records for ingress/egress proxies (#11019) ... cmd/k8s-operator: optionally update dnsrecords Configmap with DNS records for proxies. This commit adds functionality to automatically populate DNS records for the in-cluster ts.net nameserver to allow cluster workloads to resolve MagicDNS names associated with operator's proxies. The records are created as follows: * For tailscale Ingress proxies there will be a record mapping the MagicDNS name of the Ingress device and each proxy Pod's IP address. * For cluster egress proxies, configured via tailscale.com/tailnet-fqdn annotation, there will be a record for each proxy Pod, mapping the MagicDNS name of the exposed tailnet workload to the proxy Pod's IP. No records will be created for any other proxy types. Records will only be created if users have configured the operator to deploy an in-cluster ts.net nameserver by applying tailscale.com/v1alpha1.DNSConfig. It is user's responsibility to add the ts.net nameserver as a stub nameserver for ts.net DNS names. https://kubernetes.io/docs/tasks/administer-cluster/dns-custom-nameservers/#configuration-of-stub-domain-and-upstream-nameserver-using-coredns https://cloud.google.com/kubernetes-engine/docs/how-to/kube-dns#upstream_nameservers See also https://github.com/tailscale/tailscale/pull/11017 Updates tailscale/tailscale#10499 Signed-off-by: Irbe Krumina <irbe@tailscale.com>		2 months ago
..
deploy	cmd/{k8s-operator,k8s-nameserver},k8s-operator: update nameserver config with records for ingress/egress proxies (#11019)	2 months ago
generate	cmd/{k8s-nameserver,k8s-operator},k8s-operator: add a kube nameserver, make operator deploy it (#11919)	2 months ago
connector.go	cmd/k8s-operator,k8s-operator: proxy configuration mechanism via a new ProxyClass custom resource (#11074)	4 months ago
connector_test.go	cmd/k8s-operator,ipn/conf.go: fix --accept-routes for proxies (#11453)	3 months ago
dnsrecords.go	cmd/{k8s-operator,k8s-nameserver},k8s-operator: update nameserver config with records for ingress/egress proxies (#11019)	2 months ago
dnsrecords_test.go	cmd/{k8s-operator,k8s-nameserver},k8s-operator: update nameserver config with records for ingress/egress proxies (#11019)	2 months ago
ingress.go	cmd/k8s-operator,k8s-operator: proxy configuration mechanism via a new ProxyClass custom resource (#11074)	4 months ago
ingress_test.go	cmd/k8s-operator,ipn/conf.go: fix --accept-routes for proxies (#11453)	3 months ago
nameserver.go	cmd/{k8s-operator,k8s-nameserver},k8s-operator: update nameserver config with records for ingress/egress proxies (#11019)	2 months ago
nameserver_test.go	cmd/{k8s-operator,k8s-nameserver},k8s-operator: update nameserver config with records for ingress/egress proxies (#11019)	2 months ago
operator.go	cmd/{k8s-operator,k8s-nameserver},k8s-operator: update nameserver config with records for ingress/egress proxies (#11019)	2 months ago
operator_test.go	cmd/{k8s-nameserver,k8s-operator},k8s-operator: add a kube nameserver, make operator deploy it (#11919)	2 months ago
proxy.go	all: make use of ctxkey everywhere (#10846)	5 months ago
proxy_test.go	all: make use of ctxkey everywhere (#10846)	5 months ago
proxyclass.go	cmd/{k8s-nameserver,k8s-operator},k8s-operator: add a kube nameserver, make operator deploy it (#11919)	2 months ago
proxyclass_test.go	cmd/k8s-operator,k8s-operator: allow users to configure proxy env vars via ProxyClass (#11743)	2 months ago
sts.go	cmd/k8s-operator,k8s-operator: optionally serve tailscaled metrics on Pod IP (#11699)	2 months ago
sts_test.go	cmd/k8s-operator,k8s-operator: optionally serve tailscaled metrics on Pod IP (#11699)	2 months ago
svc.go	cmd/{k8s-operator,k8s-nameserver},k8s-operator: update nameserver config with records for ingress/egress proxies (#11019)	2 months ago
testutils_test.go	cmd/k8s-operator/deploy/manifests: check if IPv6 module is loaded before using it (#11867)	2 months ago