Irbe Krumina 4eec19eb3f ipn/ipnlocal,envknob: add some primitives for HA replica cert share. ...

Add an envknob for configuring
an instance's cert store as read-only, so that it
does not attempt to issue or renew TLS credentials,
only reads them from its cert store.
This will be used by the Kubernetes Operator's HA Ingress
to enable multiple replicas serving the same HTTPS endpoint
to be able to share the same cert.

Also some minor refactor to allow adding more tests
for cert retrieval logic.

Updates tailscale/corp#24795

Signed-off-by: Irbe Krumina <irbe@tailscale.com>

2025-03-10 09:04:03 +00:00

..

featureknob

envknob/featureknob: allow use of exit node on unraid (#14754)

2025-01-26 15:35:58 +00:00

logknob

all: use iterators in more places instead of Range funcs

2025-01-04 11:01:00 -08:00

envknob_nottest.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

envknob_testable.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

envknob.go

ipn/ipnlocal,envknob: add some primitives for HA replica cert share.

2025-03-10 09:04:03 +00:00