You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd/k8s-operator
Tom Proctor d89aa29081
{cmd,}/k8s-operator: support IRSA for Recorder resources (#15913)
Adds Recorder fields to configure the name and annotations of the ServiceAccount
created for and used by its associated StatefulSet. This allows the created Pod
to authenticate with AWS without requiring a Secret with static credentials,
using AWS' IAM Roles for Service Accounts feature, documented here:
https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html

Fixes #15875

Change-Id: Ib0e15c0dbc357efa4be260e9ae5077bacdcb264f
Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>
7 months ago
..
deploy {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 7 months ago
e2e cmd,tsnet,internal/client: create internal shim to deprecated control plane API 10 months ago
generate cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591) 1 year ago
connector.go cmd/k8s-operator: don't error for transient failures (#14073) 1 year ago
connector_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 11 months ago
depaware.txt wgengine/magicsock: re-shape relayManager to use an event loop (#15935) 7 months ago
dnsrecords.go cmd/k8s-operator: don't error for transient failures (#14073) 1 year ago
dnsrecords_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
egress-eps.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 10 months ago
egress-eps_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 11 months ago
egress-pod-readiness.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
egress-pod-readiness_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
egress-services-readiness.go cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792) 10 months ago
egress-services-readiness_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 11 months ago
egress-services.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
egress-services_test.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 10 months ago
ingress-for-pg.go cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet without the feature enabled (#15931) 7 months ago
ingress-for-pg_test.go cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet without the feature enabled (#15931) 7 months ago
ingress.go cmd/k8s-operator: default ingress paths to '/' if not specified by user (#15706) 8 months ago
ingress_test.go cmd/k8s-operator: default ingress paths to '/' if not specified by user (#15706) 8 months ago
metrics_resources.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
nameserver.go cmd/k8s-operator: don't error for transient failures (#14073) 1 year ago
nameserver_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 11 months ago
operator.go cmd/k8s-operator,k8s-operator/api-proxy: move k8s proxy code to library (#15857) 7 months ago
operator_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
proxyclass.go cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475) 11 months ago
proxyclass_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 11 months ago
proxygroup.go cmd/k8s-operator,k8s-operator: allow optionally using LE staging endpoint for Ingress (#15360) 9 months ago
proxygroup_specs.go cmd/{containerboot,k8s-operator},kube/kubetypes: unadvertise ingress services on shutdown (#15451) 8 months ago
proxygroup_test.go cmd/k8s-operator,k8s-operator: allow optionally using LE staging endpoint for Ingress (#15360) 9 months ago
sts.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 7 months ago
sts_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
svc.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
testutils_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 9 months ago
tsclient.go cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet without the feature enabled (#15931) 7 months ago
tsrecorder.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 7 months ago
tsrecorder_specs.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 7 months ago
tsrecorder_specs_test.go cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299) 1 year ago
tsrecorder_test.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 7 months ago