You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/k8s-operator/apis/v1alpha1
Tom Proctor 711698f5a9
cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)
Previously, the operator checked the ProxyGroup status fields for
information on how many of the proxies had successfully authed. Use
their state Secrets instead as a more reliable source of truth.

containerboot has written device_fqdn and device_ips keys to the
state Secret since inception, and pod_uid since 1.78.0, so there's
no need to use the API for that data. Read it from the state Secret
for consistency. However, to ensure we don't read data from a
previous run of containerboot, make sure we reset containerboot's
state keys on startup.

One other knock-on effect of that is ProxyGroups can briefly be
marked not Ready while a Pod is restarting. Introduce a new
ProxyGroupAvailable condition to more accurately reflect
when downstream controllers can implement flows that rely on a
ProxyGroup having at least 1 proxy Pod running.

Fixes #16327

Change-Id: I026c18e9d23e87109a471a87b8e4fb6271716a66

Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>
5 months ago
..
doc.go cmd/k8s-operator: operator can create subnetrouter (#9505) 2 years ago
register.go cmd/k8s-operator,k8s-operator,go.mod: optionally create ServiceMonitor (#14248) 1 year ago
types_connector.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 5 months ago
types_proxyclass.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 5 months ago
types_proxygroup.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 5 months ago
types_recorder.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 7 months ago
types_tsdnsconfig.go k8s-operator: add age column to all custom resources (#15663) 8 months ago
zz_generated.deepcopy.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 5 months ago