You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Irbe Krumina ba517ab388
cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274)
cmd/k8s-operator,ssh/tailssh,tsnet: optionally record kubectl exec sessions

The Kubernetes operator's API server proxy, when it receives a request
for 'kubectl exec' session now reads 'RecorderAddrs', 'EnforceRecorder'
fields from tailcfg.KubernetesCapRule.
If 'RecorderAddrs' is set to one or more addresses (of a tsrecorder instance(s)),
it attempts to connect to those and sends the session contents
to the recorder before forwarding the request to the kube API
server. If connection cannot be established or fails midway,
it is only allowed if 'EnforceRecorder' is not true (fail open).

Updates tailscale/corp#19821

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
Co-authored-by: Maisem Ali <maisem@tailscale.com>
5 months ago
..
addlicense all: update tools that manage copyright headers 2 years ago
build-webclient client/web: precompress assets 12 months ago
cloner all: use Go 1.22 range-over-int 7 months ago
connector-gen cmd/connector-gen: add helper tool for wide app connector configurations 11 months ago
containerboot cmd/containerboot,cmd/k8s-operator: enable IPv6 for fqdn egress proxies (#12577) 5 months ago
derper cmd/derper: clarify that derper and tailscaled need to be in sync 5 months ago
derpprobe cmd/derpprobe: support 'local' derpmap to get derp map via LocalAPI 6 months ago
dist release/dist/qnap: add qnap target builder 7 months ago
get-authkey util/cmpx: delete now that we're using Go 1.22 10 months ago
gitops-pusher cmd/gitops-pusher: only use OAuth creds if non-empty string 10 months ago
hello cmd/hello: link to the Hello KB article (#11022) 10 months ago
k8s-nameserver cmd/k8s-nameserver: fix AAAA record query response (#12412) 5 months ago
k8s-operator cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274) 5 months ago
mkmanifest cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS 2 years ago
mkpkg go.mod: upgrade nfpm to v2 (#8786) 1 year ago
mkversion version/mkversion: open-source version generation logic 2 years ago
nardump all: update copyright and license headers 2 years ago
natc cmd/natc: add --wg-port flag 6 months ago
netlogfmt all: use Go 1.22 range-over-int 7 months ago
nginx-auth tailcfg,all: add and use Node.IsTagged() 2 years ago
pgproxy tsnet: split user facing and backend logging 7 months ago
printdep cmd/printdep: print correct toolchain URL 2 years ago
proxy-to-grafana cmd/proxy-to-grafana: add flag for alternative control server 5 months ago
sniproxy all: use math/rand/v2 more 6 months ago
speedtest all: update copyright and license headers 2 years ago
ssh-auth-none-demo all: replace deprecated ioutil references 1 year ago
stunc cmd/stunc: support user-specified port (#12469) 5 months ago
stund types/lazy: add Peek method to SyncValue 5 months ago
stunstamp cmd/stunstamp: fix handling of invalid DERP map resp (#12679) 5 months ago
sync-containers all: adjust some build tags for plan9 1 year ago
tailscale cmd/tailscale/cli: exit node filter should display all exit node options (#12699) 5 months ago
tailscaled net/netns: add Windows support for bind-to-interface-by-route 5 months ago
testcontrol all: use Go 1.22 range-over-int 7 months ago
testwrapper cmd/testwrapper: apply results of all unit tests to coverage for all packages 9 months ago
tsconnect all: use math/rand/v2 more 6 months ago
tsidp tsnet: split user facing and backend logging 7 months ago
tsshd all: update copyright and license headers 2 years ago
viewer cmd/viewer,type/views: add MapSlice for maps of slices 5 months ago
xdpderper cmd/xdpderper: add autodetection for default interface name 5 months ago