You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Irbe Krumina 4adbd14ab5 cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252) (#18343) ... In dynamically changing environments where ACME account keys and certs are stored separately, it can happen that the account key would get deleted (and recreated) between issuances. If that is the case, we currently fail renewals and the only way to recover is for users to delete certs. This adds a config knob to allow opting out of the replaces extension and utilizes it in the Kubernetes operator where there are known user workflows that could end up with this edge case. Updates #18251 (cherry picked from commit 90b4358113) Signed-off-by: Irbe Krumina <irbe@tailscale.com>		2 weeks ago
..
deploy	cmd/k8s-operator: fixes helm template for oauth secret volume mount (#18230) (#18234)	1 month ago
e2e	cmd/k8s-operator: simplify scope of e2e tests (#17076)	4 months ago
generate	cmd/k8s-operator: support workload identity federation	2 months ago
api-server-proxy-pg.go	cmd/k8s-operator: remove Services feature flag detection	2 months ago
api-server-proxy-pg_test.go	cmd/k8s-operator: allow HA ingresses to be deleted when VIP service does not exist (#18050)	2 months ago
api-server-proxy.go	cmd/{k8s-operator,k8s-proxy},kube: use consistent type for auth mode config (#16626)	6 months ago
connector.go	cmd/k8s-operator: allow specifying replicas for connectors (#16721)	5 months ago
connector_test.go	cmd/k8s-operator: allow specifying replicas for connectors (#16721)	5 months ago
depaware.txt	cmd/cigocacher,go.mod: add cigocacher cmd	2 months ago
dnsrecords.go	k8s-operator: add IPv6 support for DNS records (#16691)	4 months ago
dnsrecords_test.go	k8s-operator: add IPv6 support for DNS records (#16691)	4 months ago
egress-eps.go	all: rename variables with lowercase-l/uppercase-I	2 months ago
egress-eps_test.go	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	6 months ago
egress-pod-readiness.go	all: rename variables with lowercase-l/uppercase-I	2 months ago
egress-pod-readiness_test.go	cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)	10 months ago
egress-services-readiness.go	all: rename variables with lowercase-l/uppercase-I	2 months ago
egress-services-readiness_test.go	all: rename variables with lowercase-l/uppercase-I	2 months ago
egress-services.go	all: rename variables with lowercase-l/uppercase-I	2 months ago
egress-services_test.go	all: rename variables with lowercase-l/uppercase-I	2 months ago
ingress-for-pg.go	cmd/k8s-operator: allow HA ingresses to be deleted when VIP service does not exist (#18050)	2 months ago
ingress-for-pg_test.go	cmd/k8s-operator: allow HA ingresses to be deleted when VIP service does not exist (#18050)	2 months ago
ingress.go	cmd/k8s-operator: allow specifying replicas for connectors (#16721)	5 months ago
ingress_test.go	cmd/k8s-operator: allow specifying replicas for connectors (#16721)	5 months ago
logger.go	cmd/k8s-operator: send operator logs to tailscale (#17110)	4 months ago
metrics_resources.go	cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)	10 months ago
nameserver.go	cmd/k8s-operator: use stable image for k8s-nameserver (#17985)	2 months ago
nameserver_test.go	cmd/k8s-operator: use stable image for k8s-nameserver (#17985)	2 months ago
nodeport-service-ports.go	cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)	7 months ago
nodeport-services-ports_test.go	cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)	7 months ago
operator.go	cmd/k8s-operator: add multi replica support for recorders (#17864)	2 months ago
operator_test.go	all: rename variables with lowercase-l/uppercase-I	2 months ago
proxyclass.go	cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)	7 months ago
proxyclass_test.go	cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)	7 months ago
proxygroup.go	cmd/k8s-operator: rename 'l' variables (#17700)	3 months ago
proxygroup_specs.go	cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252) (#18343)	2 weeks ago
proxygroup_test.go	cmd/k8s-operator: rename 'l' variables (#17700)	3 months ago
sts.go	cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252) (#18343)	2 weeks ago
sts_test.go	cmd/k8s-operator: rename 'l' variables (#17700)	3 months ago
svc-for-pg.go	cmd/k8s-operator: remove Services feature flag detection	2 months ago
svc-for-pg_test.go	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	6 months ago
svc.go	k8s-operator: reset service status before append (#17120)	4 months ago
testutils_test.go	cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252) (#18343)	2 weeks ago
tsclient.go	cmd/k8s-operator: support workload identity federation	2 months ago
tsclient_test.go	cmd/k8s-operator: support workload identity federation	2 months ago
tsrecorder.go	cmd/k8s-operator: add multi replica support for recorders (#17864)	2 months ago
tsrecorder_specs.go	cmd/k8s-operator: add multi replica support for recorders (#17864)	2 months ago
tsrecorder_specs_test.go	cmd/k8s-operator: add multi replica support for recorders (#17864)	2 months ago
tsrecorder_test.go	cmd/k8s-operator: add multi replica support for recorders (#17864)	2 months ago