You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tom Proctor 8d84720edb cmd/k8s-operator: update ProxyGroup config Secrets instead of patch (#15353) ... There was a flaky failure case where renaming a TLS hostname for an ingress might leave the old hostname dangling in tailscaled config. This happened when the proxygroup reconciler loop had an outdated resource version of the config Secret in its cache after the ingress-pg-reconciler loop had very recently written it to delete the old hostname. As the proxygroup reconciler then did a patch, there was no conflict and it reinstated the old hostname. This commit updates the patch to an update operation so that if the resource version is out of date it will fail with an optimistic lock error. It also checks for equality to reduce the likelihood that we make the update API call in the first place, because most of the time the proxygroup reconciler is not even making an update to the Secret in the case that the hostname has changed. Updates tailscale/corp#24795 Change-Id: Ie23a97440063976c9a8475d24ab18253e1f89050 Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>		9 months ago
..
addlicense	all: fix golangci-lint errors	11 months ago
build-webclient	client/web: precompress assets	2 years ago
checkmetrics	cmd/checkmetrics: add command for checking metrics against kb	1 year ago
cloner	cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types	1 year ago
connector-gen	cmd/connector-gen: add helper tool for wide app connector configurations	2 years ago
containerboot	cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)	9 months ago
derper	tsweb: split promvarz into an optional dependency	9 months ago
derpprobe	tsweb: split promvarz into an optional dependency	9 months ago
dist	release/dist/qnap: add qnap target builder	2 years ago
get-authkey	cmd,tsnet,internal/client: create internal shim to deprecated control plane API	10 months ago
gitops-pusher	cmd/gitops-pusher: log error details when unable to fetch ACL ETag	10 months ago
hello	cmd/hello: display native ipv4 (#15191)	9 months ago
k8s-nameserver	cmd/k8s-nameserver: fix AAAA record query response (#12412)	2 years ago
k8s-operator	cmd/k8s-operator: update ProxyGroup config Secrets instead of patch (#15353)	9 months ago
mkmanifest	cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS	3 years ago
mkpkg	go.mod: upgrade nfpm to v2 (#8786)	2 years ago
mkversion	version/mkversion: open-source version generation logic	3 years ago
nardump	all: update copyright and license headers	3 years ago
natc	cmd/natc: error and log when IP range is exhausted	9 months ago
netlogfmt	all: use Go 1.22 range-over-int	2 years ago
nginx-auth	tailcfg,all: add and use Node.IsTagged()	3 years ago
pgproxy	all: use new LocalAPI client package location	10 months ago
printdep	cmd/printdep: print correct toolchain URL	3 years ago
proxy-to-grafana	cmd/proxy-to-grafana: support setting Grafana role via grants	9 months ago
sniproxy	all: use new LocalAPI client package location	10 months ago
speedtest	all: update copyright and license headers	3 years ago
ssh-auth-none-demo	ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh	10 months ago
stunc	cmd/stunc: enforce read timeout deadline (#14309)	1 year ago
stund	tsweb: split promvarz into an optional dependency	9 months ago
stunstamp	cmd/stunstamp: add protocol context to timeout logs (#13422)	1 year ago
sync-containers	all: adjust some build tags for plan9	2 years ago
systray	cmd/systray: add cmd/systray back as a small client/systray wrapper	11 months ago
tailscale	tsweb: split promvarz into an optional dependency	9 months ago
tailscaled	tsweb: split promvarz into an optional dependency	9 months ago
testcontrol	all: use Go 1.22 range-over-int	2 years ago
testwrapper	cmd/testwrapper: print failed tests preventing retry (#15270)	9 months ago
tl-longchain	all: use new LocalAPI client package location	10 months ago
tsconnect	go.toolchain.branch: update to Go 1.24 (#15016)	10 months ago
tsidp	cmd/tsidp: allow CORS requests to openid-configuration (#15229)	9 months ago
tsshd	all: update copyright and license headers	3 years ago
tta	all: use new LocalAPI client package location	10 months ago
viewer	cmd/viewer,all: consistently use "read-only" instead of "readonly"	11 months ago
vnet	tstest/natlab/vnet: add start of IPv6 support	1 year ago
xdpderper	tsweb: split promvarz into an optional dependency	9 months ago