You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd/k8s-operator
Nick Khyl e815ae0ec4 util/syspolicy, ipn/ipnlocal: update syspolicy package to utilize syspolicy/rsop
In this PR, we update the syspolicy package to utilize syspolicy/rsop under the hood,
and remove syspolicy.CachingHandler, syspolicy.windowsHandler and related code
which is no longer used.

We mark the syspolicy.Handler interface and RegisterHandler/SetHandlerForTest functions
as deprecated, but keep them temporarily until they are no longer used in other repos.

We also update the package to register setting definitions for all existing policy settings
and to register the Registry-based, Windows-specific policy stores when running on Windows.

Finally, we update existing internal and external tests to use the new API and add a few more
tests and benchmarks.

Updates #12687

Signed-off-by: Nick Khyl <nickk@tailscale.com>
1 year ago
..
deploy cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 1 year ago
generate cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591) 1 year ago
connector.go kube,cmd/{k8s-operator,containerboot},envknob,ipn/store/kubestore,*/depaware.txt: rename packages (#13418) 1 year ago
connector_test.go cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 1 year ago
depaware.txt util/syspolicy, ipn/ipnlocal: update syspolicy package to utilize syspolicy/rsop 1 year ago
dnsrecords.go cmd/k8s-operator: fix DNS reconciler for dual-stack clusters (#13057) 1 year ago
dnsrecords_test.go cmd/k8s-operator: fix DNS reconciler for dual-stack clusters (#13057) 1 year ago
egress-eps.go cmd/k8s-operator: fix Pod IP selection (#13743) 1 year ago
egress-eps_test.go cmd/k8s-operator: fix Pod IP selection (#13743) 1 year ago
egress-services-readiness.go cmd/k8s-operator,k8s-operator/apis: set a readiness condition on egress Services for ProxyGroup (#13746) 1 year ago
egress-services-readiness_test.go cmd/k8s-operator,k8s-operator/apis: set a readiness condition on egress Services for ProxyGroup (#13746) 1 year ago
egress-services.go cmd/k8s-operator,k8s-operator/apis: set a readiness condition on egress Services for ProxyGroup (#13746) 1 year ago
egress-services_test.go cmd/k8s-operator,k8s-operator: create ConfigMap for egress services + small fixes for egress services (#13715) 1 year ago
ingress.go cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 1 year ago
ingress_test.go cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 1 year ago
nameserver.go kube,cmd/{k8s-operator,containerboot},envknob,ipn/store/kubestore,*/depaware.txt: rename packages (#13418) 1 year ago
nameserver_test.go cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299) 1 year ago
operator.go client/tailscale,cmd/{cli,get-authkey,k8s-operator}: set distinct User-Agents 1 year ago
operator_test.go cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 1 year ago
proxy.go kube,cmd/{k8s-operator,containerboot},envknob,ipn/store/kubestore,*/depaware.txt: rename packages (#13418) 1 year ago
proxy_test.go cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274) 1 year ago
proxyclass.go cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 1 year ago
proxyclass_test.go cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 1 year ago
proxygroup.go cmd/k8s-operator: don't error out if ProxyClass for ProxyGroup not found. (#13736) 1 year ago
proxygroup_specs.go cmd/k8s-operator: base ProxyGroup StatefulSet on common proxy.yaml definition (#13714) 1 year ago
proxygroup_test.go cmd/k8s-operator: base ProxyGroup StatefulSet on common proxy.yaml definition (#13714) 1 year ago
sts.go cmd/k8s-operator,k8s-operator: create ConfigMap for egress services + small fixes for egress services (#13715) 1 year ago
sts_test.go cmd/k8s-operator,k8s-operator,go.{mod,sum}: make individual proxy images/image pull policies configurable (#11928) 2 years ago
svc.go cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 1 year ago
testutils_test.go cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller (#13684) 1 year ago
tsrecorder.go cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller (#13684) 1 year ago
tsrecorder_specs.go cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299) 1 year ago
tsrecorder_specs_test.go cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299) 1 year ago
tsrecorder_test.go cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller (#13684) 1 year ago