Irbe Krumina 299c5372bd

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303) ...

cmd/containerboot: manage HA Ingress TLS certs from containerboot

When ran as HA Ingress node, containerboot now can determine
whether it should manage TLS certs for the HA Ingress replicas
and call the LocalAPI cert endpoint to ensure initial issuance
and renewal of the shared TLS certs.

Updates tailscale/corp#24795

Signed-off-by: Irbe Krumina <irbe@tailscale.com>

2025-03-14 17:33:08 +00:00

..

certs_test.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

certs.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

forwarding.go

cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658)

2024-10-03 20:15:00 +01:00

healthz.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)

2025-01-29 07:35:50 +00:00

kube_test.go

cmd/containerboot: wait for consistent state on shutdown (#14263)

2025-01-30 13:51:10 +00:00

kube.go

cmd/containerboot: wait for consistent state on shutdown (#14263)

2025-01-30 13:51:10 +00:00

main_test.go

cmd/containerboot: wait for consistent state on shutdown (#14263)

2025-01-30 13:51:10 +00:00

main.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

metrics.go

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

serve_test.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

serve.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

services_test.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)

2025-01-29 07:35:50 +00:00

services.go

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

settings.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

tailscaled.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

test_tailscale.sh

cmd/containerboot: make a tests table, add more tests.

2022-11-10 09:14:27 -08:00

test_tailscaled.sh

cmd/containerboot: avoid leaking bash scripts after test runs

2023-09-21 13:17:48 -07:00