Jonathan Nobels 52710945f5

control/controlclient, ipn: add client audit logging (#14950) ...

updates tailscale/corp#26435

Adds client support for sending audit logs to control via /machine/audit-log.
Specifically implements audit logging for user initiated disconnections.

This will require further work to optimize the peristant storage and exclusion
via build tags for mobile:
tailscale/corp#27011
tailscale/corp#27012

Signed-off-by: Jonathan Nobels <jonathan@tailscale.com>

2025-03-12 10:37:03 -04:00

..

deploy

cmd/k8s-operator: reinstate HA Ingress reconciler (#14887)

2025-02-04 13:09:43 +00:00

e2e

cmd,tsnet,internal/client: create internal shim to deprecated control plane API

2025-02-18 10:23:04 -06:00

generate

cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591)

2024-09-27 01:05:56 +01:00

connector_test.go

go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)

2025-01-17 05:37:53 +00:00

connector.go

cmd/k8s-operator: don't error for transient failures (#14073)

2024-12-05 12:11:22 +00:00

depaware.txt

control/controlclient, ipn: add client audit logging (#14950)

2025-03-12 10:37:03 -04:00

dnsrecords_test.go

cmd/k8s-operator: fix DNS reconciler for dual-stack clusters (#13057)

2024-08-13 18:42:01 +01:00

dnsrecords.go

cmd/k8s-operator: don't error for transient failures (#14073)

2024-12-05 12:11:22 +00:00

egress-eps_test.go

go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)

2025-01-17 05:37:53 +00:00

egress-eps.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)

2025-01-29 07:35:50 +00:00

egress-pod-readiness_test.go

cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792)

2025-01-30 08:47:45 +00:00

egress-pod-readiness.go

cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792)

2025-01-30 08:47:45 +00:00

egress-services_test.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)

2025-01-29 07:35:50 +00:00

egress-services-readiness_test.go

go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)

2025-01-17 05:37:53 +00:00

egress-services-readiness.go

cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792)

2025-01-30 08:47:45 +00:00

egress-services.go

cmd/k8s-operator: advertise VIPServices in ProxyGroup config (#14946)

2025-03-06 14:05:41 +00:00

ingress_test.go

go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)

2025-01-17 05:37:53 +00:00

ingress-for-pg_test.go

cmd/k8s-operator: ensure HA Ingress can operate in multicluster mode. (#15157)

2025-03-06 23:13:10 +00:00

ingress-for-pg.go

cmd/k8s-operator: ensure HA Ingress can operate in multicluster mode. (#15157)

2025-03-06 23:13:10 +00:00

ingress.go

cmd/k8s-operator: ensure HA Ingress can operate in multicluster mode. (#15157)

2025-03-06 23:13:10 +00:00

metrics_resources.go

cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475)

2025-01-09 07:15:19 +00:00

nameserver_test.go

go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)

2025-01-17 05:37:53 +00:00

nameserver.go

cmd/k8s-operator: don't error for transient failures (#14073)

2024-12-05 12:11:22 +00:00

operator_test.go

cmd/k8s-operator: don't set deprecated configfile hash on new proxies (#14817)

2025-01-29 15:48:05 +00:00

operator.go

cmd/k8s-operator: ensure HA Ingress can operate in multicluster mode. (#15157)

2025-03-06 23:13:10 +00:00

proxy_test.go

cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274)

2024-07-08 21:18:55 +01:00

proxy.go

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

proxyclass_test.go

go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)

2025-01-17 05:37:53 +00:00

proxyclass.go

cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475)

2025-01-09 07:15:19 +00:00

proxygroup_specs.go

cmd/k8s-operator: advertise VIPServices in ProxyGroup config (#14946)

2025-03-06 14:05:41 +00:00

proxygroup_test.go

cmd/k8s-operator: advertise VIPServices in ProxyGroup config (#14946)

2025-03-06 14:05:41 +00:00

proxygroup.go

cmd/k8s-operator: advertise VIPServices in ProxyGroup config (#14946)

2025-03-06 14:05:41 +00:00

sts_test.go

cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475)

2025-01-09 07:15:19 +00:00

sts.go

cmd/k8s-operator: don't set deprecated configfile hash on new proxies (#14817)

2025-01-29 15:48:05 +00:00

svc.go

cmd/k8s-operator: don't error for transient failures (#14073)

2024-12-05 12:11:22 +00:00

testutils_test.go

client/tailscale,cmd/k8s-operator,internal/client/tailscale: move VIP service client methods into internal control client

2025-02-18 16:25:17 -06:00

tsclient.go

client/tailscale,cmd/k8s-operator,internal/client/tailscale: move VIP service client methods into internal control client

2025-02-18 16:25:17 -06:00

tsrecorder_specs_test.go

cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299)

2024-09-11 12:19:29 +01:00

tsrecorder_specs.go

cmd/k8s-operator,kube/kubeclient,docs/k8s: update rbac to emit events + small fixes (#14164)

2024-11-20 14:22:34 +00:00

tsrecorder_test.go

go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)

2025-01-17 05:37:53 +00:00

tsrecorder.go

cmd/k8s-operator: don't error for transient failures (#14073)

2024-12-05 12:11:22 +00:00