You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Irbe Krumina 3f39211f98 cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792) ... This change builds on top of #14436 to ensure minimum downtime during egress ProxyGroup update rollouts: - adds a readiness gate for ProxyGroup replicas that prevents kubelet from marking the replica Pod as ready before a corresponding readiness condition has been added to the Pod - adds a reconciler that reconciles egress ProxyGroup Pods and, for each that is not ready, if cluster traffic for relevant egress endpoints is routed via this Pod- if so add the readiness condition to allow kubelet to mark the Pod as ready. During the sequenced StatefulSet update rollouts kubelet does not restart a Pod before the previous replica has been updated and marked as ready, so ensuring that a replica is not marked as ready allows to avoid a temporary post-update situation where all replicas have been restarted, but none of the new ones are yet set up as an endpoint for the egress service, so cluster traffic is dropped. Updates tailscale/tailscale#14326 Signed-off-by: Irbe Krumina <irbe@tailscale.com>		10 months ago
..
deploy	cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792)	10 months ago
e2e	cmd/k8s-operator,k8s-operator: operator integration tests (#12792)	12 months ago
generate	cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591)	1 year ago
connector.go	cmd/k8s-operator: don't error for transient failures (#14073)	1 year ago
connector_test.go	go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)	11 months ago
depaware.txt	Revert "ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh"	10 months ago
dnsrecords.go	cmd/k8s-operator: don't error for transient failures (#14073)	1 year ago
dnsrecords_test.go	cmd/k8s-operator: fix DNS reconciler for dual-stack clusters (#13057)	1 year ago
egress-eps.go	cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)	10 months ago
egress-eps_test.go	go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)	11 months ago
egress-pod-readiness.go	cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792)	10 months ago
egress-pod-readiness_test.go	cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792)	10 months ago
egress-services-readiness.go	cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792)	10 months ago
egress-services-readiness_test.go	go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)	11 months ago
egress-services.go	cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)	10 months ago
egress-services_test.go	cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)	10 months ago
ingress-for-pg.go	tailcfg: add ServiceName	11 months ago
ingress-for-pg_test.go	tailcfg: add ServiceName	11 months ago
ingress.go	cmd/{k8s-operator,containerboot},kube/kubetypes: parse Ingresses for ingress ProxyGroup (#14583)	11 months ago
ingress_test.go	go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)	11 months ago
metrics_resources.go	cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475)	11 months ago
nameserver.go	cmd/k8s-operator: don't error for transient failures (#14073)	1 year ago
nameserver_test.go	go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)	11 months ago
operator.go	cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792)	10 months ago
operator_test.go	cmd/k8s-operator: don't set deprecated configfile hash on new proxies (#14817)	10 months ago
proxy.go	all: fix golangci-lint errors	11 months ago
proxy_test.go	cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274)	1 year ago
proxyclass.go	cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475)	11 months ago
proxyclass_test.go	go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)	11 months ago
proxygroup.go	cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)	10 months ago
proxygroup_specs.go	cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)	10 months ago
proxygroup_test.go	cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)	10 months ago
sts.go	cmd/k8s-operator: don't set deprecated configfile hash on new proxies (#14817)	10 months ago
sts_test.go	cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475)	11 months ago
svc.go	cmd/k8s-operator: don't error for transient failures (#14073)	1 year ago
testutils_test.go	cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792)	10 months ago
tsclient.go	cmd/{k8s-operator,containerboot},kube/kubetypes: parse Ingresses for ingress ProxyGroup (#14583)	11 months ago
tsrecorder.go	cmd/k8s-operator: don't error for transient failures (#14073)	1 year ago
tsrecorder_specs.go	cmd/k8s-operator,kube/kubeclient,docs/k8s: update rbac to emit events + small fixes (#14164)	1 year ago
tsrecorder_specs_test.go	cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299)	1 year ago
tsrecorder_test.go	go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)	11 months ago