You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Irbe Krumina d86d1e7601
cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter for egress proxies. (#12075)
Turn off stateful filtering for egress proxies to allow cluster
traffic to be forwarded to tailnet.

Allow configuring stateful filter via tailscaled config file.

Deprecate EXPERIMENTAL_TS_CONFIGFILE_PATH env var and introduce a new
TS_EXPERIMENTAL_VERSIONED_CONFIG env var that can be used to provide
containerboot a directory that should contain one or more
tailscaled config files named cap-<tailscaled-cap-version>.hujson.
Containerboot will pick the one with the newest capability version
that is not newer than its current capability version.

Proxies with this change will not work with older Tailscale
Kubernetes operator versions - users must ensure that
the deployed operator is at the same version or newer (up to
4 version skew) than the proxies.

Updates tailscale/tailscale#12061

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
Co-authored-by: Maisem Ali <maisem@tailscale.com>
2 months ago
..
addlicense all: update tools that manage copyright headers 1 year ago
build-webclient client/web: precompress assets 7 months ago
cloner all: use Go 1.22 range-over-int 2 months ago
connector-gen cmd/connector-gen: add helper tool for wide app connector configurations 7 months ago
containerboot cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter for egress proxies. (#12075) 2 months ago
derper derp/derphttp: fix netcheck HTTPS probes 2 months ago
derpprobe cmd/{derper,derpprobe}: add --version flag 3 months ago
dist release/dist/qnap: add qnap target builder 2 months ago
get-authkey util/cmpx: delete now that we're using Go 1.22 5 months ago
gitops-pusher cmd/gitops-pusher: only use OAuth creds if non-empty string 5 months ago
hello cmd/hello: link to the Hello KB article (#11022) 5 months ago
k8s-nameserver cmd/{k8s-operator,k8s-nameserver},k8s-operator: update nameserver config with records for ingress/egress proxies (#11019) 2 months ago
k8s-operator cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter for egress proxies. (#12075) 2 months ago
mkmanifest cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS 1 year ago
mkpkg go.mod: upgrade nfpm to v2 (#8786) 11 months ago
mkversion version/mkversion: open-source version generation logic 1 year ago
nardump all: update copyright and license headers 1 year ago
netlogfmt all: use Go 1.22 range-over-int 2 months ago
nginx-auth tailcfg,all: add and use Node.IsTagged() 1 year ago
pgproxy various: add golangci-lint, fix issues (#7905) 1 year ago
printdep cmd/printdep: print correct toolchain URL 1 year ago
proxy-to-grafana all: use Go 1.22 range-over-int 2 months ago
sniproxy all: make more tests pass/skip in airplane mode 2 months ago
speedtest all: update copyright and license headers 1 year ago
ssh-auth-none-demo all: replace deprecated ioutil references 10 months ago
stunc all: update copyright and license headers 1 year ago
stund build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#11410) 2 months ago
sync-containers all: adjust some build tags for plan9 10 months ago
tailscale cmd/tailscale: add missing set flags for linux 2 months ago
tailscaled ipn/ipnserver: close a small race in ipnserver, ~simplify code 2 months ago
testcontrol all: use Go 1.22 range-over-int 2 months ago
testwrapper cmd/testwrapper: apply results of all unit tests to coverage for all packages 4 months ago
tsconnect health, all: remove health.Global, finish plumbing health.Tracker 2 months ago
tsidp cmd/tsidp: add start of OIDC Tailscale IdP 8 months ago
tsshd all: update copyright and license headers 1 year ago
viewer all: use Go 1.22 range-over-int 2 months ago