You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd/k8s-operator
Irbe Krumina 2aac916888
cmd/{containerboot,k8s-operator},kube/kubetypes: kube Ingress L7 proxies only advertise HTTPS endpoint when ready (#14171)
cmd/containerboot,kube/kubetypes,cmd/k8s-operator: detect if Ingress is created in a tailnet that has no HTTPS

This attempts to make Kubernetes Operator L7 Ingress setup failures more explicit:
- the Ingress resource now only advertises HTTPS endpoint via status.ingress.loadBalancer.hostname when/if the proxy has succesfully loaded serve config
- the proxy attempts to catch cases where HTTPS is disabled for the tailnet and logs a warning

Updates tailscale/tailscale#12079
Updates tailscale/tailscale#10407

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
1 year ago
..
deploy cmd/k8s-operator/deploy/chart: allow reading OAuth creds from a CSI driver's volume and annotating operator's Service account (#14264) 1 year ago
generate cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591) 1 year ago
connector.go cmd/{containerboot,k8s-operator},kube/kubetypes: kube Ingress L7 proxies only advertise HTTPS endpoint when ready (#14171) 1 year ago
connector_test.go cmd/k8s-operator,k8s-operator,kube/kubetypes: add an option to configure app connector via Connector spec (#13950) 1 year ago
depaware.txt cmd/k8s-operator,k8s-operator,go.mod: optionally create ServiceMonitor (#14248) 1 year ago
dnsrecords.go cmd/k8s-operator: fix DNS reconciler for dual-stack clusters (#13057) 1 year ago
dnsrecords_test.go cmd/k8s-operator: fix DNS reconciler for dual-stack clusters (#13057) 1 year ago
egress-eps.go cmd/k8s-operator: fix Pod IP selection (#13743) 1 year ago
egress-eps_test.go cmd/k8s-operator: fix Pod IP selection (#13743) 1 year ago
egress-services-readiness.go cmd/k8s-operator: fix a bunch of status equality checks (#14270) 1 year ago
egress-services-readiness_test.go cmd/k8s-operator,k8s-operator/apis: set a readiness condition on egress Services for ProxyGroup (#13746) 1 year ago
egress-services.go cmd/k8s-operator: fix a bunch of status equality checks (#14270) 1 year ago
egress-services_test.go cmd/k8s-operator: fix port name change bug for egress ProxyGroup proxies (#14247) 1 year ago
ingress.go cmd/{containerboot,k8s-operator},kube/kubetypes: kube Ingress L7 proxies only advertise HTTPS endpoint when ready (#14171) 1 year ago
ingress_test.go cmd/{containerboot,k8s-operator},kube/kubetypes: kube Ingress L7 proxies only advertise HTTPS endpoint when ready (#14171) 1 year ago
metrics_resources.go cmd/k8s-operator,k8s-operator,go.mod: optionally create ServiceMonitor (#14248) 1 year ago
nameserver.go cmd/k8s-operator: fix a bunch of status equality checks (#14270) 1 year ago
nameserver_test.go cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299) 1 year ago
operator.go cmd/k8s-operator,k8s-operator,go.mod: optionally create ServiceMonitor (#14248) 1 year ago
operator_test.go cmd/k8s-operator: always set stateful filtering to false (#14216) 1 year ago
proxy.go kube,cmd/{k8s-operator,containerboot},envknob,ipn/store/kubestore,*/depaware.txt: rename packages (#13418) 1 year ago
proxy_test.go cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274) 1 year ago
proxyclass.go cmd/k8s-operator: fix a bunch of status equality checks (#14270) 1 year ago
proxyclass_test.go cmd/k8s-operator,k8s-operator,go.mod: optionally create ServiceMonitor (#14248) 1 year ago
proxygroup.go cmd/k8s-operator: fix a bunch of status equality checks (#14270) 1 year ago
proxygroup_specs.go kube/{kubeapi,kubeclient},ipn/store/kubestore,cmd/{containerboot,k8s-operator}: emit kube store Events (#14112) 1 year ago
proxygroup_test.go cmd/k8s-operator,k8s-operator,go.mod: optionally create ServiceMonitor (#14248) 1 year ago
sts.go cmd/{containerboot,k8s-operator},kube/kubetypes: kube Ingress L7 proxies only advertise HTTPS endpoint when ready (#14171) 1 year ago
sts_test.go cmd/containerboot: serve health on local endpoint (#14246) 1 year ago
svc.go cmd/{containerboot,k8s-operator},kube/kubetypes: kube Ingress L7 proxies only advertise HTTPS endpoint when ready (#14171) 1 year ago
testutils_test.go cmd/k8s-operator,k8s-operator,go.mod: optionally create ServiceMonitor (#14248) 1 year ago
tsrecorder.go cmd/k8s-operator: fix a bunch of status equality checks (#14270) 1 year ago
tsrecorder_specs.go cmd/k8s-operator,kube/kubeclient,docs/k8s: update rbac to emit events + small fixes (#14164) 1 year ago
tsrecorder_specs_test.go cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299) 1 year ago
tsrecorder_test.go cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller (#13684) 1 year ago