You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Irbe Krumina cac290da87
cmd/k8s-operator: users can configure firewall mode for kube operator proxies (#9769)
* cmd/k8s-operator: users can configure operator to set firewall mode for proxies

Users can now pass PROXY_FIREWALL_MODE={nftables,auto,iptables} to operator to make it create ingress/egress proxies with that firewall mode

Also makes sure that if an invalid firewall mode gets configured, the operator will not start provisioning proxy resources, but will instead log an error and write an error event to the related Service.

Updates tailscale/tailscale#9310

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
2 years ago
..
addlicense all: update tools that manage copyright headers 3 years ago
cloner cmd/cloner: fix typo in test type's name 2 years ago
containerboot cmd/containerboot: revert to using tailscale up 2 years ago
derper types/ipproto: import and test string parsing for ipproto 2 years ago
derpprobe prober: migrate to Prometheus metric library 3 years ago
dist cmd/dist,release/dist: add distsign signing hooks (#9070) 2 years ago
get-authkey all: use cmpx.Or where it made sense 3 years ago
gitops-pusher .github,cmd/gitops-pusher: update to checkout@v4 2 years ago
hello all: update copyright and license headers 3 years ago
k8s-operator cmd/k8s-operator: users can configure firewall mode for kube operator proxies (#9769) 2 years ago
mkmanifest cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS 3 years ago
mkpkg go.mod: upgrade nfpm to v2 (#8786) 2 years ago
mkversion version/mkversion: open-source version generation logic 3 years ago
nardump all: update copyright and license headers 3 years ago
netlogfmt go.mod: update github.com/go-json-experiment/json (#9508) 2 years ago
nginx-auth tailcfg,all: add and use Node.IsTagged() 3 years ago
pgproxy various: add golangci-lint, fix issues (#7905) 3 years ago
printdep cmd/printdep: print correct toolchain URL 3 years ago
proxy-to-grafana tailcfg,all: add and use Node.IsTagged() 3 years ago
sniproxy sniproxy allows configuration of hostname 2 years ago
speedtest all: update copyright and license headers 3 years ago
ssh-auth-none-demo all: replace deprecated ioutil references 2 years ago
stunc all: update copyright and license headers 3 years ago
sync-containers all: adjust some build tags for plan9 2 years ago
tailscale cmd/tailscale: promote new serve/funnel CLI to be default (#9833) 2 years ago
tailscaled cmd/tailscaled,*: add start of configuration file support 2 years ago
testcontrol all: update copyright and license headers 3 years ago
testwrapper tstest, tstest/integration, github/workflows: shard integration tests 2 years ago
tsconnect go.mod,cmd/tsconnect: bump esbuild 2 years ago
tsshd all: update copyright and license headers 3 years ago
viewer cmd/cloner: add regression test for slice nil/empty semantics 2 years ago