You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd/k8s-operator
Irbe Krumina e29e3c150f
cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262)
Ensure that if the ProxyGroup for HA Ingress changes, the TLS Secret
and Role and RoleBinding that allow proxies to read/write to it are
updated.

Fixes #16259

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
6 months ago
..
deploy cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (#15961) 7 months ago
e2e cmd,tsnet,internal/client: create internal shim to deprecated control plane API 10 months ago
generate cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591) 1 year ago
connector.go cmd/k8s-operator: don't error for transient failures (#14073) 1 year ago
connector_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 11 months ago
depaware.txt cmd/tailscale/cli: add a risk message about rp_filter 6 months ago
dnsrecords.go cmd/k8s-operator: don't error for transient failures (#14073) 1 year ago
dnsrecords_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
egress-eps.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 10 months ago
egress-eps_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 11 months ago
egress-pod-readiness.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
egress-pod-readiness_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
egress-services-readiness.go cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792) 10 months ago
egress-services-readiness_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 11 months ago
egress-services.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
egress-services_test.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 10 months ago
ingress-for-pg.go cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262) 6 months ago
ingress-for-pg_test.go cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262) 6 months ago
ingress.go cmd/k8s-operator: default ingress paths to '/' if not specified by user (#15706) 8 months ago
ingress_test.go cmd/k8s-operator: ensure status update errors are displayed to users (#16251) 6 months ago
metrics_resources.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
nameserver.go cmd/k8s-operator: ensure status update errors are displayed to users (#16251) 6 months ago
nameserver_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 11 months ago
operator.go cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (#15961) 7 months ago
operator_test.go cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (#16058) 6 months ago
proxyclass.go cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475) 11 months ago
proxyclass_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 11 months ago
proxygroup.go cmd/k8s-operator: ensure status update errors are displayed to users (#16251) 6 months ago
proxygroup_specs.go cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (#15961) 7 months ago
proxygroup_test.go cmd/k8s-operator: ensure status update errors are displayed to users (#16251) 6 months ago
sts.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 7 months ago
sts_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
svc-for-pg.go cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (#16058) 6 months ago
svc-for-pg_test.go cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262) 6 months ago
svc.go cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (#16058) 6 months ago
testutils_test.go cmd/k8s-operator: fix Tailscale Service API errors check (#16020) 7 months ago
tsclient.go cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet without the feature enabled (#15931) 7 months ago
tsrecorder.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 7 months ago
tsrecorder_specs.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 7 months ago
tsrecorder_specs_test.go cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299) 1 year ago
tsrecorder_test.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 7 months ago