You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Maisem Ali 24509f8b22 cmd/k8s-operator: add support for control plane assigned groups
Previously we would use the Impersonate-Group header to pass through
tags to the k8s api server. However, we would do nothing for non-tagged
nodes. Now that we have a way to specify these via peerCaps respect those
and send down groups for non-tagged nodes as well.

For tagged nodes, it defaults to sending down the tags as groups to retain
legacy behavior if there are no caps set. Otherwise, the tags are omitted.

Updates #5055

Signed-off-by: Maisem Ali <maisem@tailscale.com>
1 year ago
..
addlicense all: update tools that manage copyright headers 2 years ago
cloner tailcfg,ipn/ipnlocal,wgengine: add values to PeerCapabilities 1 year ago
containerboot cmd/containerboot,kube: consolidate the two kube clients 2 years ago
derper derp: include src IPs in mesh watch messages 1 year ago
derpprobe prober: migrate to Prometheus metric library 2 years ago
dist cmd/dist,release/dist: expose RPM signing hook (#8789) 1 year ago
get-authkey all: use cmpx.Or where it made sense 1 year ago
gitops-pusher cmd/gitops-pusher: re-use existing types from acl package 1 year ago
hello all: update copyright and license headers 2 years ago
k8s-operator cmd/k8s-operator: add support for control plane assigned groups 1 year ago
mkmanifest cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS 2 years ago
mkpkg go.mod: upgrade nfpm to v2 (#8786) 1 year ago
mkversion version/mkversion: open-source version generation logic 2 years ago
nardump all: update copyright and license headers 2 years ago
netlogfmt all: update exp/slices and fix call sites 1 year ago
nginx-auth tailcfg,all: add and use Node.IsTagged() 2 years ago
pgproxy various: add golangci-lint, fix issues (#7905) 2 years ago
printdep cmd/printdep: print correct toolchain URL 2 years ago
proxy-to-grafana tailcfg,all: add and use Node.IsTagged() 2 years ago
sniproxy cmd/sniproxy: add client metrics 1 year ago
speedtest all: update copyright and license headers 2 years ago
ssh-auth-none-demo all: update copyright and license headers 2 years ago
stunc all: update copyright and license headers 2 years ago
sync-containers cmd/sync-containers: update latest and stable tags 2 years ago
tailscale client/web: hook up data fetching to fill --dev React UI 1 year ago
tailscaled wgengine/magicsock: only cache N most recent endpoints per-Addr 1 year ago
testcontrol all: update copyright and license headers 2 years ago
testwrapper cmd/testwrapper: handle build failures 1 year ago
tsconnect tool/{node,yarn}: update node and yarn tools 1 year ago
tsshd all: update copyright and license headers 2 years ago
viewer util/codegen: support embedded fields 2 years ago