You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd/k8s-operator
Irbe Krumina cac290da87
cmd/k8s-operator: users can configure firewall mode for kube operator proxies (#9769)
* cmd/k8s-operator: users can configure operator to set firewall mode for proxies

Users can now pass PROXY_FIREWALL_MODE={nftables,auto,iptables} to operator to make it create ingress/egress proxies with that firewall mode

Also makes sure that if an invalid firewall mode gets configured, the operator will not start provisioning proxy resources, but will instead log an error and write an error event to the related Service.

Updates tailscale/tailscale#9310

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
1 year ago
..
manifests cmd/k8s-operator: users can configure firewall mode for kube operator proxies (#9769) 1 year ago
ingress.go cmd/k8s-operator: allow setting same host value for tls and ingress rules 1 year ago
operator.go cmd/k8s-operator: users can configure firewall mode for kube operator proxies (#9769) 1 year ago
operator_test.go cmd/k8s-operator: users can configure firewall mode for kube operator proxies (#9769) 1 year ago
proxy.go cmd/k8s-operator: add APISERVER_PROXY env 1 year ago
proxy_test.go tailcfg: add RawMessage 1 year ago
sts.go cmd/k8s-operator: users can configure firewall mode for kube operator proxies (#9769) 1 year ago
svc.go cmd/k8s-operator: users can configure firewall mode for kube operator proxies (#9769) 1 year ago