You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Irbe Krumina eabb424275 cmd/k8s-operator,docs/k8s: run tun mode proxies in privileged containers (#14262) ... We were previously relying on unintended behaviour by runc where all containers where by default given read/write/mknod permissions for tun devices. This behaviour was removed in https://github.com/opencontainers/runc/pull/3468 and released in runc 1.2. Containerd container runtime, used by Docker and majority of Kubernetes distributions bumped runc to 1.2 in 1.7.24 https://github.com/containerd/containerd/releases/tag/v1.7.24 thus breaking our reference tun mode Tailscale Kubernetes manifests and Kubernetes operator proxies. This PR changes the all Kubernetes container configs that run Tailscale in tun mode to privileged. This should not be a breaking change because all these containers would run in a Pod that already has a privileged init container. Updates tailscale/tailscale#14256 Updates tailscale/tailscale#10814 Signed-off-by: Irbe Krumina <irbe@tailscale.com>		1 year ago
..
addlicense	all: update tools that manage copyright headers	3 years ago
build-webclient	client/web: precompress assets	2 years ago
checkmetrics	cmd/checkmetrics: add command for checking metrics against kb	1 year ago
cloner	cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types	1 year ago
connector-gen	cmd/connector-gen: add helper tool for wide app connector configurations	2 years ago
containerboot	cmd/containerboot: serve health on local endpoint (#14246)	1 year ago
derper	tsweb: change RequestID format to have a date in it	1 year ago
derpprobe	cmd/derpprobe,prober: add ability to restrict derpprobe to a single region	1 year ago
dist	release/dist/qnap: add qnap target builder	2 years ago
get-authkey	client/tailscale,cmd/{cli,get-authkey,k8s-operator}: set distinct User-Agents	1 year ago
gitops-pusher	cmd/gitops-pusher: ignore previous etag if local acls match control (#13068)	1 year ago
hello	cmd/hello: link to the Hello KB article (#11022)	2 years ago
k8s-nameserver	cmd/k8s-nameserver: fix AAAA record query response (#12412)	2 years ago
k8s-operator	cmd/k8s-operator,docs/k8s: run tun mode proxies in privileged containers (#14262)	1 year ago
mkmanifest	cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS	3 years ago
mkpkg	go.mod: upgrade nfpm to v2 (#8786)	2 years ago
mkversion	version/mkversion: open-source version generation logic	3 years ago
nardump	all: update copyright and license headers	3 years ago
natc	cmd/natc: fix nil pointer	1 year ago
netlogfmt	all: use Go 1.22 range-over-int	2 years ago
nginx-auth	tailcfg,all: add and use Node.IsTagged()	3 years ago
pgproxy	tsnet: split user facing and backend logging	2 years ago
printdep	cmd/printdep: print correct toolchain URL	3 years ago
proxy-to-grafana	cmd/proxy-to-grafana: add flag for alternative control server	1 year ago
sniproxy	all: use math/rand/v2 more	2 years ago
speedtest	all: update copyright and license headers	3 years ago
ssh-auth-none-demo	all: replace deprecated ioutil references	2 years ago
stunc	cmd/stunc: support user-specified port (#12469)	1 year ago
stund	tsweb: change RequestID format to have a date in it	1 year ago
stunstamp	cmd/stunstamp: add protocol context to timeout logs (#13422)	1 year ago
sync-containers	all: adjust some build tags for plan9	2 years ago
systray	cmd/systray: handle reconnects to IPN bus (#13386)	1 year ago
tailscale	cmd/tailscale/cli: fix format string	1 year ago
tailscaled	cmd/tailscaled: log SCM interactions if the policy setting is enabled at the time of interaction	1 year ago
testcontrol	all: use Go 1.22 range-over-int	2 years ago
testwrapper	cmd/testwrapper: add pkg runtime to output (#13894)	1 year ago
tl-longchain	cmd/tl-longchain: tool to re-sign nodes with long rotation signatures	1 year ago
tsconnect	all: use iterators over slice views more	1 year ago
tsidp	cmd/tsidp: add --dir flag	1 year ago
tsshd	all: update copyright and license headers	3 years ago
tta	cmd/tta: pull out test driver dialing into a type, fix bugs	1 year ago
viewer	cmd/viewer: import types/views when generating a getter for a map field	1 year ago
vnet	tstest/natlab/vnet: add start of IPv6 support	1 year ago
xdpderper	all: add test for package comments, fix, add comments as needed	1 year ago