You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tom Proctor 711698f5a9 cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) ... Previously, the operator checked the ProxyGroup status fields for information on how many of the proxies had successfully authed. Use their state Secrets instead as a more reliable source of truth. containerboot has written device_fqdn and device_ips keys to the state Secret since inception, and pod_uid since 1.78.0, so there's no need to use the API for that data. Read it from the state Secret for consistency. However, to ensure we don't read data from a previous run of containerboot, make sure we reset containerboot's state keys on startup. One other knock-on effect of that is ProxyGroups can briefly be marked not Ready while a Pod is restarting. Introduce a new ProxyGroupAvailable condition to more accurately reflect when downstream controllers can implement flows that rely on a ProxyGroup having at least 1 proxy Pod running. Fixes #16327 Change-Id: I026c18e9d23e87109a471a87b8e4fb6271716a66 Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>		5 months ago
..
certs.go	cmd/{k8s-operator,containerboot}: check TLS cert before advertising VIPService (#15427)	8 months ago
certs_test.go	cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)	9 months ago
egressservices.go	cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)	7 months ago
egressservices_test.go	cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)	7 months ago
forwarding.go	cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658)	1 year ago
healthz.go	cmd/{containerboot,k8s-operator},kube/kubetypes: unadvertise ingress services on shutdown (#15451)	8 months ago
ingressservices.go	cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)	7 months ago
ingressservices_test.go	cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)	7 months ago
kube.go	cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)	5 months ago
kube_test.go	cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)	5 months ago
main.go	cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)	5 months ago
main_test.go	cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)	5 months ago
metrics.go	cmd/{containerboot,k8s-operator},kube/kubetypes: unadvertise ingress services on shutdown (#15451)	8 months ago
serve.go	cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)	7 months ago
serve_test.go	cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)	9 months ago
services.go	cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)	7 months ago
settings.go	cmd/containerboot: allow setting --accept-dns via TS_EXTRA_ARGS again (#16129)	6 months ago
settings_test.go	cmd/containerboot: allow setting --accept-dns via TS_EXTRA_ARGS again (#16129)	6 months ago
tailscaled.go	cmd/containerboot: speed up tests (#14883)	8 months ago
test_tailscale.sh	cmd/containerboot: make a tests table, add more tests.	3 years ago
test_tailscaled.sh	cmd/containerboot: avoid leaking bash scripts after test runs	2 years ago