You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd/k8s-operator
Brad Fitzpatrick 3f5c560fd4 ipn/ipnlocal: drop h2c package, use net/http's support
In Dec 2021 in d3d503d997 I had grand plans to make exit node DNS
cheaper by using HTTP/2 over PeerAPI, at least on some platforms. I
only did server-side support though and never made it to the client.

In the ~4 years since, some things have happened:

* Go 1.24 got support for http.Protocols (https://pkg.go.dev/net/http#Protocols)
  and doing UnencryptedHTTP2 ("HTTP2 with prior knowledge")
* The old h2c upgrade mechanism was deprecated; see https://github.com/golang/go/issues/63565
  and https://github.com/golang/go/issues/67816
* Go plans to deprecate x/net/http2 and move everything to the standard library.

So this drops our use of the x/net/http2/h2c package and instead
enables h2c (on all platforms now) using the standard library.

This does mean we lose the deprecated h2c Upgrade support, but that's
fine.

If/when we do the h2c client support for ExitDNS, we'll have to probe
the peer to see whether it supports it. Or have it reply with a header
saying that future requests can us h2c. (It's tempting to use capver,
but maybe people will disable that support anyway, so we should
discover it at runtime instead.)

Also do the same in the sessionrecording package.

Updates #17305

Change-Id: If323f5ef32486effb18ed836888aa05c0efb701e
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2 months ago
..
deploy cmd/k8s-operator: add DNS policy and config support to ProxyClass (#16887) 2 months ago
e2e cmd/k8s-operator: simplify scope of e2e tests (#17076) 3 months ago
generate cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591) 1 year ago
api-server-proxy-pg.go all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572) 5 months ago
api-server-proxy-pg_test.go all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572) 5 months ago
api-server-proxy.go cmd/{k8s-operator,k8s-proxy},kube: use consistent type for auth mode config (#16626) 5 months ago
connector.go cmd/k8s-operator: allow specifying replicas for connectors (#16721) 3 months ago
connector_test.go cmd/k8s-operator: allow specifying replicas for connectors (#16721) 3 months ago
depaware.txt ipn/ipnlocal: drop h2c package, use net/http's support 2 months ago
dnsrecords.go k8s-operator: add IPv6 support for DNS records (#16691) 3 months ago
dnsrecords_test.go k8s-operator: add IPv6 support for DNS records (#16691) 3 months ago
egress-eps.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 10 months ago
egress-eps_test.go all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572) 5 months ago
egress-pod-readiness.go util/backoff: rename logtail/backoff package to util/backoff 2 months ago
egress-pod-readiness_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
egress-services-readiness.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 6 months ago
egress-services-readiness_test.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 6 months ago
egress-services.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 6 months ago
egress-services_test.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 10 months ago
ingress-for-pg.go all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572) 5 months ago
ingress-for-pg_test.go all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572) 5 months ago
ingress.go cmd/k8s-operator: allow specifying replicas for connectors (#16721) 3 months ago
ingress_test.go cmd/k8s-operator: allow specifying replicas for connectors (#16721) 3 months ago
logger.go cmd/k8s-operator: send operator logs to tailscale (#17110) 3 months ago
metrics_resources.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
nameserver.go cmd/k8s-operator: add replica support to nameserver (#17246) 2 months ago
nameserver_test.go cmd/k8s-operator: add replica support to nameserver (#17246) 2 months ago
nodeport-service-ports.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 6 months ago
nodeport-services-ports_test.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 6 months ago
operator.go cmd/k8s-operator: send operator logs to tailscale (#17110) 3 months ago
operator_test.go k8s-operator: reset service status before append (#17120) 3 months ago
proxyclass.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 6 months ago
proxyclass_test.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 6 months ago
proxygroup.go cmd/{k8s-proxy,containerboot,k8s-operator},kube: add health check and metrics endpoints for k8s-proxy (#16540) 5 months ago
proxygroup_specs.go all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572) 5 months ago
proxygroup_test.go cmd/{k8s-proxy,containerboot,k8s-operator},kube: add health check and metrics endpoints for k8s-proxy (#16540) 5 months ago
sts.go cmd/k8s-operator: add DNS policy and config support to ProxyClass (#16887) 2 months ago
sts_test.go cmd/k8s-operator: add DNS policy and config support to ProxyClass (#16887) 2 months ago
svc-for-pg.go all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572) 5 months ago
svc-for-pg_test.go all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572) 5 months ago
svc.go k8s-operator: reset service status before append (#17120) 3 months ago
testutils_test.go cmd/k8s-operator: allow specifying replicas for connectors (#16721) 3 months ago
tsclient.go all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572) 5 months ago
tsrecorder.go cmd/k8s-operator: Set login server on tsrecorder nodes (#16443) 5 months ago
tsrecorder_specs.go cmd/k8s-operator: Set login server on tsrecorder nodes (#16443) 5 months ago
tsrecorder_specs_test.go cmd/k8s-operator: Set login server on tsrecorder nodes (#16443) 5 months ago
tsrecorder_test.go cmd/k8s-operator: Set login server on tsrecorder nodes (#16443) 5 months ago