Raj Singh 6ed86a0251 cmd/k8s-operator: add IDP CRD for OpenID Connect identity provider ...

Adds a new IDP (Identity Provider) Custom Resource Definition to the Tailscale Kubernetes operator. This allows users to deploy and manage   tsidp instances as Kubernetes resources.

Updates #16666

Signed-off-by: Raj Singh <raj@tailscale.com>

2025-07-27 12:19:02 -05:00

..

deploy

cmd/k8s-operator: add IDP CRD for OpenID Connect identity provider

2025-07-27 12:19:02 -05:00

e2e

cmd,tsnet,internal/client: create internal shim to deprecated control plane API

2025-02-18 10:23:04 -06:00

generate

cmd/k8s-operator: add IDP CRD for OpenID Connect identity provider

2025-07-27 12:19:02 -05:00

api-server-proxy-pg_test.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

api-server-proxy-pg.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

api-server-proxy.go

cmd/{k8s-operator,k8s-proxy},kube: use consistent type for auth mode config (#16626)

2025-07-22 14:46:38 +01:00

connector_test.go

cmd/k8s-operator: remove conffile hashing mechanism (#16335)

2025-06-20 10:34:47 +01:00

connector.go

cmd/k8s-operator: Allow configuration of login server (#16432)

2025-07-02 21:42:31 +01:00

depaware.txt

cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266)

2025-07-09 09:21:56 +01:00

dnsrecords_test.go

cmd/k8s-operator: Enhance DNS record handling for ProxyGroup egress services (#16181)

2025-07-25 19:45:37 -05:00

dnsrecords.go

cmd/k8s-operator: Enhance DNS record handling for ProxyGroup egress services (#16181)

2025-07-25 19:45:37 -05:00

egress-eps_test.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

egress-eps.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)

2025-01-29 07:35:50 +00:00

egress-pod-readiness_test.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

egress-pod-readiness.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

egress-services_test.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)

2025-01-29 07:35:50 +00:00

egress-services-readiness_test.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

egress-services-readiness.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

egress-services.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

idp_specs.go

cmd/k8s-operator: add IDP CRD for OpenID Connect identity provider

2025-07-27 12:19:02 -05:00

idp_test.go

cmd/k8s-operator: add IDP CRD for OpenID Connect identity provider

2025-07-27 12:19:02 -05:00

idp.go

cmd/k8s-operator: add IDP CRD for OpenID Connect identity provider

2025-07-27 12:19:02 -05:00

ingress_test.go

cmd/k8s-operator: Allow custom ingress class names (#16472)

2025-07-07 12:12:59 +01:00

ingress-for-pg_test.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

ingress-for-pg.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

ingress.go

cmd/k8s-operator: Allow custom ingress class names (#16472)

2025-07-07 12:12:59 +01:00

kubestore_utils.go

cmd/k8s-operator: add IDP CRD for OpenID Connect identity provider

2025-07-27 12:19:02 -05:00

metrics_resources.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

nameserver_test.go

cmd/k8s-operator: Allow specifying cluster ips for nameservers (#16477)

2025-07-21 19:06:36 +01:00

nameserver.go

cmd/k8s-operator: Allow specifying cluster ips for nameservers (#16477)

2025-07-21 19:06:36 +01:00

nodeport-service-ports.go

cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)

2025-06-27 17:12:14 +01:00

nodeport-services-ports_test.go

cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)

2025-06-27 17:12:14 +01:00

operator_test.go

cmd/k8s-operator: Allow custom ingress class names (#16472)

2025-07-07 12:12:59 +01:00

operator.go

cmd/k8s-operator: add IDP CRD for OpenID Connect identity provider

2025-07-27 12:19:02 -05:00

proxyclass_test.go

cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)

2025-06-27 17:12:14 +01:00

proxyclass.go

cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)

2025-06-27 17:12:14 +01:00

proxygroup_specs.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

proxygroup_test.go

cmd/{k8s-proxy,containerboot,k8s-operator},kube: add health check and metrics endpoints for k8s-proxy (#16540)

2025-07-22 17:07:51 +01:00

proxygroup.go

cmd/{k8s-proxy,containerboot,k8s-operator},kube: add health check and metrics endpoints for k8s-proxy (#16540)

2025-07-22 17:07:51 +01:00

sts_test.go

cmd/k8s-operator: allow letsencrypt staging on k8s proxies (#16521)

2025-07-10 14:33:13 +01:00

sts.go

cmd/k8s-operator: allow letsencrypt staging on k8s proxies (#16521)

2025-07-10 14:33:13 +01:00

svc-for-pg_test.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

svc-for-pg.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

svc.go

cmd/k8s-operator: Allow configuration of login server (#16432)

2025-07-02 21:42:31 +01:00

testutils_test.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

tsclient.go

all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)

2025-07-21 11:03:21 +01:00

tsrecorder_specs_test.go

cmd/k8s-operator: Set login server on tsrecorder nodes (#16443)

2025-07-03 15:53:35 +01:00

tsrecorder_specs.go

cmd/k8s-operator: Set login server on tsrecorder nodes (#16443)

2025-07-03 15:53:35 +01:00

tsrecorder_test.go

cmd/k8s-operator: Set login server on tsrecorder nodes (#16443)

2025-07-03 15:53:35 +01:00

tsrecorder.go

cmd/k8s-operator: add IDP CRD for OpenID Connect identity provider

2025-07-27 12:19:02 -05:00