You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd/k8s-operator
Andrea Gottardo fd77965f23
net/tlsdial: call out firewalls blocking Tailscale in health warnings (#13840)
Updates tailscale/tailscale#13839

Adds a new blockblame package which can detect common MITM SSL certificates used by network appliances. We use this in `tlsdial` to display a dedicated health warning when we cannot connect to control, and a network appliance MITM attack is detected.

Signed-off-by: Andrea Gottardo <andrea@gottardo.me>
6 days ago
..
deploy cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 2 weeks ago
generate cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591) 4 weeks ago
connector.go kube,cmd/{k8s-operator,containerboot},envknob,ipn/store/kubestore,*/depaware.txt: rename packages (#13418) 2 months ago
connector_test.go cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 2 weeks ago
depaware.txt net/tlsdial: call out firewalls blocking Tailscale in health warnings (#13840) 6 days ago
dnsrecords.go cmd/k8s-operator: fix DNS reconciler for dual-stack clusters (#13057) 2 months ago
dnsrecords_test.go cmd/k8s-operator: fix DNS reconciler for dual-stack clusters (#13057) 2 months ago
egress-eps.go cmd/k8s-operator: fix Pod IP selection (#13743) 2 weeks ago
egress-eps_test.go cmd/k8s-operator: fix Pod IP selection (#13743) 2 weeks ago
egress-services-readiness.go cmd/k8s-operator,k8s-operator/apis: set a readiness condition on egress Services for ProxyGroup (#13746) 2 weeks ago
egress-services-readiness_test.go cmd/k8s-operator,k8s-operator/apis: set a readiness condition on egress Services for ProxyGroup (#13746) 2 weeks ago
egress-services.go cmd/k8s-operator,k8s-operator/apis: set a readiness condition on egress Services for ProxyGroup (#13746) 2 weeks ago
egress-services_test.go cmd/k8s-operator,k8s-operator: create ConfigMap for egress services + small fixes for egress services (#13715) 2 weeks ago
ingress.go cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 2 weeks ago
ingress_test.go cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 2 weeks ago
nameserver.go kube,cmd/{k8s-operator,containerboot},envknob,ipn/store/kubestore,*/depaware.txt: rename packages (#13418) 2 months ago
nameserver_test.go cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299) 1 month ago
operator.go client/tailscale,cmd/{cli,get-authkey,k8s-operator}: set distinct User-Agents 2 weeks ago
operator_test.go cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 2 weeks ago
proxy.go kube,cmd/{k8s-operator,containerboot},envknob,ipn/store/kubestore,*/depaware.txt: rename packages (#13418) 2 months ago
proxy_test.go cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274) 4 months ago
proxyclass.go cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 2 weeks ago
proxyclass_test.go cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 2 weeks ago
proxygroup.go cmd/k8s-operator: don't error out if ProxyClass for ProxyGroup not found. (#13736) 2 weeks ago
proxygroup_specs.go cmd/k8s-operator: base ProxyGroup StatefulSet on common proxy.yaml definition (#13714) 2 weeks ago
proxygroup_test.go cmd/k8s-operator: base ProxyGroup StatefulSet on common proxy.yaml definition (#13714) 2 weeks ago
sts.go cmd/k8s-operator,k8s-operator: create ConfigMap for egress services + small fixes for egress services (#13715) 2 weeks ago
sts_test.go cmd/k8s-operator,k8s-operator,go.{mod,sum}: make individual proxy images/image pull policies configurable (#11928) 5 months ago
svc.go cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (#13720) 2 weeks ago
testutils_test.go cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller (#13684) 2 weeks ago
tsrecorder.go cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller (#13684) 2 weeks ago
tsrecorder_specs.go cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299) 1 month ago
tsrecorder_specs_test.go cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299) 1 month ago
tsrecorder_test.go cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller (#13684) 2 weeks ago