You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/k8s-operator
Tom Proctor d89aa29081
{cmd,}/k8s-operator: support IRSA for Recorder resources (#15913)
Adds Recorder fields to configure the name and annotations of the ServiceAccount
created for and used by its associated StatefulSet. This allows the created Pod
to authenticate with AWS without requiring a Secret with static credentials,
using AWS' IAM Roles for Service Accounts feature, documented here:
https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html

Fixes #15875

Change-Id: Ib0e15c0dbc357efa4be260e9ae5077bacdcb264f
Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>
7 months ago
..
api-proxy cmd/k8s-operator,k8s-operator/api-proxy: move k8s proxy code to library (#15857) 7 months ago
apis {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 7 months ago
sessionrecording net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl 8 months ago
api-docs-config.yaml go.{mod,sum},tstest/tools,k8s-operator,cmd/k8s-operator: autogenerate CRD API docs (#12884) 1 year ago
api.md {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 7 months ago
conditions.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 10 months ago
conditions_test.go cmd/k8s-operator,k8s-operator,go.{mod,sum}: publish proxy status condition for annotated services (#12463) 1 year ago
utils.go cmd/{k8s-operator,containerboot},k8s-operator: remove support for proxies below capver 95. (#13986) 1 year ago