You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Irbe Krumina ba517ab388
cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274)
cmd/k8s-operator,ssh/tailssh,tsnet: optionally record kubectl exec sessions

The Kubernetes operator's API server proxy, when it receives a request
for 'kubectl exec' session now reads 'RecorderAddrs', 'EnforceRecorder'
fields from tailcfg.KubernetesCapRule.
If 'RecorderAddrs' is set to one or more addresses (of a tsrecorder instance(s)),
it attempts to connect to those and sends the session contents
to the recorder before forwarding the request to the kube API
server. If connection cannot be established or fails midway,
it is only allowed if 'EnforceRecorder' is not true (fail open).

Updates tailscale/corp#19821

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
Co-authored-by: Maisem Ali <maisem@tailscale.com>
5 months ago
..
addlicense
build-webclient
cloner
connector-gen
containerboot
derper
derpprobe
dist
get-authkey
gitops-pusher
hello
k8s-nameserver
k8s-operator cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274) 5 months ago
mkmanifest
mkpkg
mkversion
nardump
natc
netlogfmt
nginx-auth
pgproxy
printdep
proxy-to-grafana
sniproxy
speedtest
ssh-auth-none-demo
stunc
stund
stunstamp
sync-containers
tailscale
tailscaled
testcontrol
testwrapper
tsconnect
tsidp
tsshd
viewer
xdpderper