You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Irbe Krumina cac290da87
cmd/k8s-operator: users can configure firewall mode for kube operator proxies (#9769)
* cmd/k8s-operator: users can configure operator to set firewall mode for proxies

Users can now pass PROXY_FIREWALL_MODE={nftables,auto,iptables} to operator to make it create ingress/egress proxies with that firewall mode

Also makes sure that if an invalid firewall mode gets configured, the operator will not start provisioning proxy resources, but will instead log an error and write an error event to the related Service.

Updates tailscale/tailscale#9310

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
12 months ago
..
addlicense all: update tools that manage copyright headers 2 years ago
cloner cmd/cloner: fix typo in test type's name 1 year ago
containerboot cmd/containerboot: revert to using tailscale up 12 months ago
derper types/ipproto: import and test string parsing for ipproto 12 months ago
derpprobe prober: migrate to Prometheus metric library 1 year ago
dist cmd/dist,release/dist: add distsign signing hooks (#9070) 1 year ago
get-authkey all: use cmpx.Or where it made sense 1 year ago
gitops-pusher .github,cmd/gitops-pusher: update to checkout@v4 1 year ago
hello all: update copyright and license headers 2 years ago
k8s-operator cmd/k8s-operator: users can configure firewall mode for kube operator proxies (#9769) 12 months ago
mkmanifest cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS 2 years ago
mkpkg go.mod: upgrade nfpm to v2 (#8786) 1 year ago
mkversion version/mkversion: open-source version generation logic 2 years ago
nardump all: update copyright and license headers 2 years ago
netlogfmt go.mod: update github.com/go-json-experiment/json (#9508) 1 year ago
nginx-auth tailcfg,all: add and use Node.IsTagged() 2 years ago
pgproxy various: add golangci-lint, fix issues (#7905) 1 year ago
printdep cmd/printdep: print correct toolchain URL 2 years ago
proxy-to-grafana tailcfg,all: add and use Node.IsTagged() 2 years ago
sniproxy sniproxy allows configuration of hostname 12 months ago
speedtest all: update copyright and license headers 2 years ago
ssh-auth-none-demo all: replace deprecated ioutil references 1 year ago
stunc all: update copyright and license headers 2 years ago
sync-containers all: adjust some build tags for plan9 1 year ago
tailscale cmd/tailscale: promote new serve/funnel CLI to be default (#9833) 12 months ago
tailscaled cmd/tailscaled,*: add start of configuration file support 12 months ago
testcontrol all: update copyright and license headers 2 years ago
testwrapper tstest, tstest/integration, github/workflows: shard integration tests 12 months ago
tsconnect go.mod,cmd/tsconnect: bump esbuild 1 year ago
tsshd all: update copyright and license headers 2 years ago
viewer cmd/cloner: add regression test for slice nil/empty semantics 1 year ago