You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd/k8s-operator
Maisem Ali 24509f8b22 cmd/k8s-operator: add support for control plane assigned groups
Previously we would use the Impersonate-Group header to pass through
tags to the k8s api server. However, we would do nothing for non-tagged
nodes. Now that we have a way to specify these via peerCaps respect those
and send down groups for non-tagged nodes as well.

For tagged nodes, it defaults to sending down the tags as groups to retain
legacy behavior if there are no caps set. Otherwise, the tags are omitted.

Updates #5055

Signed-off-by: Maisem Ali <maisem@tailscale.com>
1 year ago
..
manifests cmd/k8s-operator: make auth proxy pass tags as Impersonate-Group 2 years ago
operator.go cmd/k8s-operator: update controller-runtime to v0.15 2 years ago
operator_test.go cmd/k8s-operator: update controller-runtime to v0.15 2 years ago
proxy.go cmd/k8s-operator: add support for control plane assigned groups 1 year ago
proxy_test.go cmd/k8s-operator: add support for control plane assigned groups 1 year ago