You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Irbe Krumina d86d1e7601 cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter for egress proxies. (#12075) ... Turn off stateful filtering for egress proxies to allow cluster traffic to be forwarded to tailnet. Allow configuring stateful filter via tailscaled config file. Deprecate EXPERIMENTAL_TS_CONFIGFILE_PATH env var and introduce a new TS_EXPERIMENTAL_VERSIONED_CONFIG env var that can be used to provide containerboot a directory that should contain one or more tailscaled config files named cap-<tailscaled-cap-version>.hujson. Containerboot will pick the one with the newest capability version that is not newer than its current capability version. Proxies with this change will not work with older Tailscale Kubernetes operator versions - users must ensure that the deployed operator is at the same version or newer (up to 4 version skew) than the proxies. Updates tailscale/tailscale#12061 Signed-off-by: Irbe Krumina <irbe@tailscale.com> Co-authored-by: Maisem Ali <maisem@tailscale.com>		1 month ago
..
deploy	cmd/k8s-operator/deploy,k8s-operator: document that metrics are unstable (#11979)	2 months ago
generate	cmd/k8s-operator: cleanup runReconciler signature (#11993)	2 months ago
connector.go	cmd/k8s-operator,k8s-operator: proxy configuration mechanism via a new ProxyClass custom resource (#11074)	4 months ago
connector_test.go	cmd/k8s-operator,ipn/conf.go: fix --accept-routes for proxies (#11453)	3 months ago
dnsrecords.go	cmd/{k8s-operator,k8s-nameserver},k8s-operator: update nameserver config with records for ingress/egress proxies (#11019)	2 months ago
dnsrecords_test.go	cmd/{k8s-operator,k8s-nameserver},k8s-operator: update nameserver config with records for ingress/egress proxies (#11019)	2 months ago
ingress.go	cmd/k8s-operator,k8s-operator: proxy configuration mechanism via a new ProxyClass custom resource (#11074)	4 months ago
ingress_test.go	cmd/k8s-operator,ipn/conf.go: fix --accept-routes for proxies (#11453)	3 months ago
nameserver.go	cmd/k8s-operator: default nameserver image to tailscale/k8s-nameserver:unstable (#11991)	1 month ago
nameserver_test.go	cmd/k8s-operator: default nameserver image to tailscale/k8s-nameserver:unstable (#11991)	1 month ago
operator.go	cmd/k8s-operator: cleanup runReconciler signature (#11993)	2 months ago
operator_test.go	cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter for egress proxies. (#12075)	1 month ago
proxy.go	all: make use of ctxkey everywhere (#10846)	5 months ago
proxy_test.go	all: make use of ctxkey everywhere (#10846)	5 months ago
proxyclass.go	cmd/{k8s-nameserver,k8s-operator},k8s-operator: add a kube nameserver, make operator deploy it (#11919)	2 months ago
proxyclass_test.go	cmd/k8s-operator,k8s-operator: allow users to configure proxy env vars via ProxyClass (#11743)	2 months ago
sts.go	cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter for egress proxies. (#12075)	1 month ago
sts_test.go	cmd/k8s-operator,k8s-operator: optionally serve tailscaled metrics on Pod IP (#11699)	2 months ago
svc.go	cmd/{k8s-operator,k8s-nameserver},k8s-operator: update nameserver config with records for ingress/egress proxies (#11019)	2 months ago
testutils_test.go	cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter for egress proxies. (#12075)	1 month ago