You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Brad Fitzpatrick d05e6dc09e util/syspolicy/policyclient: add policyclient.Client interface, start plumbing ... This is step 2 of ~4, breaking up #14720 into reviewable chunks, with the aim to make syspolicy be a build-time configurable feature. Step 1 was #16984. In this second step, the util/syspolicy/policyclient package is added with the policyclient.Client interface. This is the interface that's always present (regardless of build tags), and is what code around the tree uses to ask syspolicy/MDM questions. There are two implementations of policyclient.Client for now: 1) NoPolicyClient, which only returns default values. 2) the unexported, temporary 'globalSyspolicy', which is implemented in terms of the global functions we wish to later eliminate. This then starts to plumb around the policyclient.Client to most callers. Future changes will plumb it more. When the last of the global func callers are gone, then we can unexport the global functions and make a proper policyclient.Client type and constructor in the syspolicy package, removing the globalSyspolicy impl out of tsd. The final change will sprinkle build tags in a few more places and lock it in with dependency tests to make sure the dependencies don't later creep back in. Updates #16998 Updates #12614 Change-Id: Ib2c93d15c15c1f2b981464099177cd492d50391c Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>		3 months ago
..
deploy	cmd/k8s-operator,k8s-operator: allow setting a `priorityClassName` (#16685)	4 months ago
e2e	cmd,tsnet,internal/client: create internal shim to deprecated control plane API	10 months ago
generate	cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591)	1 year ago
api-server-proxy-pg.go	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	5 months ago
api-server-proxy-pg_test.go	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	5 months ago
api-server-proxy.go	cmd/{k8s-operator,k8s-proxy},kube: use consistent type for auth mode config (#16626)	4 months ago
connector.go	cmd/k8s-operator: Allow configuration of login server (#16432)	5 months ago
connector_test.go	cmd/k8s-operator: remove conffile hashing mechanism (#16335)	6 months ago
depaware.txt	util/syspolicy/policyclient: add policyclient.Client interface, start plumbing	3 months ago
dnsrecords.go	cmd/k8s-operator: Enhance DNS record handling for ProxyGroup egress services (#16181)	4 months ago
dnsrecords_test.go	cmd/k8s-operator: Enhance DNS record handling for ProxyGroup egress services (#16181)	4 months ago
egress-eps.go	cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)	10 months ago
egress-eps_test.go	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	5 months ago
egress-pod-readiness.go	cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)	9 months ago
egress-pod-readiness_test.go	cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)	9 months ago
egress-services-readiness.go	cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)	5 months ago
egress-services-readiness_test.go	cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)	5 months ago
egress-services.go	cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)	5 months ago
egress-services_test.go	cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)	10 months ago
ingress-for-pg.go	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	5 months ago
ingress-for-pg_test.go	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	5 months ago
ingress.go	cmd/k8s-operator: Allow custom ingress class names (#16472)	5 months ago
ingress_test.go	cmd/k8s-operator: Allow custom ingress class names (#16472)	5 months ago
metrics_resources.go	cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)	9 months ago
nameserver.go	cmd/k8s-operator: Allow specifying cluster ips for nameservers (#16477)	4 months ago
nameserver_test.go	cmd/k8s-operator: Allow specifying cluster ips for nameservers (#16477)	4 months ago
nodeport-service-ports.go	cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)	5 months ago
nodeport-services-ports_test.go	cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)	5 months ago
operator.go	cmd/{k8s-operator,k8s-proxy},kube: use consistent type for auth mode config (#16626)	4 months ago
operator_test.go	cmd/k8s-operator: Allow custom ingress class names (#16472)	5 months ago
proxyclass.go	cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)	5 months ago
proxyclass_test.go	cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)	5 months ago
proxygroup.go	cmd/{k8s-proxy,containerboot,k8s-operator},kube: add health check and metrics endpoints for k8s-proxy (#16540)	4 months ago
proxygroup_specs.go	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	5 months ago
proxygroup_test.go	cmd/{k8s-proxy,containerboot,k8s-operator},kube: add health check and metrics endpoints for k8s-proxy (#16540)	4 months ago
sts.go	cmd/k8s-operator,k8s-operator: allow setting a `priorityClassName` (#16685)	4 months ago
sts_test.go	cmd/k8s-operator,k8s-operator: allow setting a `priorityClassName` (#16685)	4 months ago
svc-for-pg.go	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	5 months ago
svc-for-pg_test.go	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	5 months ago
svc.go	cmd/k8s-operator: Allow configuration of login server (#16432)	5 months ago
testutils_test.go	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	5 months ago
tsclient.go	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	5 months ago
tsrecorder.go	cmd/k8s-operator: Set login server on tsrecorder nodes (#16443)	5 months ago
tsrecorder_specs.go	cmd/k8s-operator: Set login server on tsrecorder nodes (#16443)	5 months ago
tsrecorder_specs_test.go	cmd/k8s-operator: Set login server on tsrecorder nodes (#16443)	5 months ago
tsrecorder_test.go	cmd/k8s-operator: Set login server on tsrecorder nodes (#16443)	5 months ago