You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd/k8s-operator
Tom Meadows 2fc247573b
cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363)
* cmd/k8s-operator: ProxyClass annotation for Services and Ingresses

Previously, the ProxyClass could only be configured for Services and
Ingresses via a Label. This adds the ability to set it via an
Annotation, but prioritizes the Label if both a Label and Annotation are
set.

Updates #14323

Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>

* Update cmd/k8s-operator/operator.go

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
Signed-off-by: Tom Meadows <tom@tmlabs.co.uk>

* Update cmd/k8s-operator/operator.go

Signed-off-by: Tom Meadows <tom@tmlabs.co.uk>

* cmd/k8s-operator: ProxyClass annotation for Services and Ingresses

Previously, the ProxyClass could only be configured for Services and
Ingresses via a Label. This adds the ability to set it via an
Annotation, but prioritizes the Label if both a Label and Annotation are
set.

Updates #14323

Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>

---------

Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: Tom Meadows <tom@tmlabs.co.uk>
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
5 months ago
..
deploy cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 5 months ago
e2e cmd,tsnet,internal/client: create internal shim to deprecated control plane API 10 months ago
generate cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591) 1 year ago
connector.go cmd/k8s-operator: don't error for transient failures (#14073) 1 year ago
connector_test.go cmd/k8s-operator: remove conffile hashing mechanism (#16335) 6 months ago
depaware.txt cmd/tailscale/cli: add a risk message about rp_filter 6 months ago
dnsrecords.go cmd/k8s-operator: don't error for transient failures (#14073) 1 year ago
dnsrecords_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
egress-eps.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 10 months ago
egress-eps_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 11 months ago
egress-pod-readiness.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
egress-pod-readiness_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
egress-services-readiness.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 5 months ago
egress-services-readiness_test.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 5 months ago
egress-services.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 5 months ago
egress-services_test.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 10 months ago
ingress-for-pg.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 5 months ago
ingress-for-pg_test.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 5 months ago
ingress.go cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363) 5 months ago
ingress_test.go cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363) 5 months ago
metrics_resources.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
nameserver.go cmd/k8s-operator: ensure status update errors are displayed to users (#16251) 6 months ago
nameserver_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 11 months ago
nodeport-service-ports.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 5 months ago
nodeport-services-ports_test.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 5 months ago
operator.go cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363) 5 months ago
operator_test.go cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363) 5 months ago
proxyclass.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 5 months ago
proxyclass_test.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 5 months ago
proxygroup.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 5 months ago
proxygroup_specs.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 5 months ago
proxygroup_test.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 5 months ago
sts.go cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363) 5 months ago
sts_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
svc-for-pg.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 5 months ago
svc-for-pg_test.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 5 months ago
svc.go cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363) 5 months ago
testutils_test.go cmd/k8s-operator: remove conffile hashing mechanism (#16335) 6 months ago
tsclient.go cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet without the feature enabled (#15931) 7 months ago
tsrecorder.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 5 months ago
tsrecorder_specs.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 7 months ago
tsrecorder_specs_test.go cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299) 1 year ago
tsrecorder_test.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 7 months ago