You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Irbe Krumina 90b4358113
cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252)
In dynamically changing environments where ACME account keys and certs
are stored separately, it can happen that the account key would get
deleted (and recreated) between issuances. If that is the case,
we currently fail renewals and the only way to recover is for users
to delete certs.
This adds a config knob to allow opting out of the replaces extension
and utilizes it in the Kubernetes operator where there are known
user workflows that could end up with this edge case.

Updates #18251

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
5 days ago
..
auditlog syncs: add Mutex/RWMutex alias/wrappers for future mutex debugging 1 month ago
conffile cmd/tailscale/cli,ipn/conffile: add declarative config mode for Services (#17435) 3 months ago
desktop go.mod: bump golang.org/x/crypto (#17907) 1 month ago
ipnauth all: use buildfeature constants in a few more places 3 months ago
ipnext ipn/ipnlocal: remove all the weird locking (LockedOnEntry, UnlockEarly, etc) 1 month ago
ipnlocal cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252) 5 days ago
ipnserver feature/featuretags, all: add build features, use existing ones in more places 3 months ago
ipnstate cmd/tailscale/cli: stabilise the output of `tailscale lock status --json` 2 weeks ago
lapitest various: allow tailscaled shutdown via LocalAPI 3 months ago
localapi client/local: add method to set gauge metric to a value 1 week ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 2 years ago
store ipn/store, feature/condregister: permit callers to empty import optonal ipn stores 3 months ago
backend.go types/netmap: remove PrivateKey from NetworkMap 1 month ago
backend_test.go ipn: fix the string representation of an empty ipn.Notify 3 months ago
conf.go ipn: ensure that conffile is source of truth for advertised services. (#15361) 9 months ago
doc.go ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate 11 months ago
ipn_clone.go cmd/tailscale/cli,ipn,all: make peer relay server port a *uint16 4 weeks ago
ipn_test.go all: do not depend on the testing package 2 years ago
ipn_view.go cmd/tailscale/cli,ipn,all: make peer relay server port a *uint16 4 weeks ago
prefs.go cmd/tailscale/cli,ipn,all: make peer relay server port a *uint16 4 weeks ago
prefs_test.go cmd/tailscale/cli,ipn,all: make peer relay server port a *uint16 4 weeks ago
serve.go cmd/tailscale,ipn: add Unix socket support for serve 3 weeks ago
serve_expand_test.go cmd/tailscale,ipn: add Unix socket support for serve 3 weeks ago
serve_test.go ipn/serve: validate service paths in HasPathHandler 4 weeks ago
store.go cmd/tailscaled,ipn: show a health warning when state store fails to open (#17883) 1 month ago
store_test.go ipn/store: automatically migrate between plaintext and encrypted state (#16318) 6 months ago