Irbe Krumina 00a7dd180a

cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (#16058) ...

Validate that any tags that users have specified via tailscale.com/tags
annotation are valid Tailscale ACL tags.
Validate that no more than one HA Tailscale Kubernetes Services in a single cluster refer
to the same Tailscale Service.

Updates tailscale/tailscale#16054
Updates tailscale/tailscale#16035

Signed-off-by: Irbe Krumina <irbe@tailscale.com>

2025-05-23 12:23:58 +01:00

..

deploy

cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (#15961)

2025-05-19 12:58:32 +01:00

e2e

cmd,tsnet,internal/client: create internal shim to deprecated control plane API

2025-02-18 10:23:04 -06:00

generate

cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591)

2024-09-27 01:05:56 +01:00

connector_test.go

go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)

2025-01-17 05:37:53 +00:00

connector.go

cmd/k8s-operator: don't error for transient failures (#14073)

2024-12-05 12:11:22 +00:00

depaware.txt

client/web: add Sec-Fetch-Site CSRF protection (#16046)

2025-05-22 12:26:02 -07:00

dnsrecords_test.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

dnsrecords.go

cmd/k8s-operator: don't error for transient failures (#14073)

2024-12-05 12:11:22 +00:00

egress-eps_test.go

go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)

2025-01-17 05:37:53 +00:00

egress-eps.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)

2025-01-29 07:35:50 +00:00

egress-pod-readiness_test.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

egress-pod-readiness.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

egress-services_test.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)

2025-01-29 07:35:50 +00:00

egress-services-readiness_test.go

go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)

2025-01-17 05:37:53 +00:00

egress-services-readiness.go

cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792)

2025-01-30 08:47:45 +00:00

egress-services.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

ingress_test.go

cmd/k8s-operator: default ingress paths to '/' if not specified by user (#15706)

2025-04-17 16:14:34 +01:00

ingress-for-pg_test.go

cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (#16058)

2025-05-23 12:23:58 +01:00

ingress-for-pg.go

cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (#16058)

2025-05-23 12:23:58 +01:00

ingress.go

cmd/k8s-operator: default ingress paths to '/' if not specified by user (#15706)

2025-04-17 16:14:34 +01:00

metrics_resources.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

nameserver_test.go

go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)

2025-01-17 05:37:53 +00:00

nameserver.go

cmd/k8s-operator: don't error for transient failures (#14073)

2024-12-05 12:11:22 +00:00

operator_test.go

cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (#16058)

2025-05-23 12:23:58 +01:00

operator.go

cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (#15961)

2025-05-19 12:58:32 +01:00

proxyclass_test.go

go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)

2025-01-17 05:37:53 +00:00

proxyclass.go

cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475)

2025-01-09 07:15:19 +00:00

proxygroup_specs.go

cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (#15961)

2025-05-19 12:58:32 +01:00

proxygroup_test.go

cmd/k8s-operator,k8s-operator: allow optionally using LE staging endpoint for Ingress (#15360)

2025-03-21 08:53:41 +00:00

proxygroup.go

cmd/k8s-operator,k8s-operator: allow optionally using LE staging endpoint for Ingress (#15360)

2025-03-21 08:53:41 +00:00

sts_test.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

sts.go

{cmd,}/k8s-operator: support IRSA for Recorder resources (#15913)

2025-05-19 11:35:05 +01:00

svc-for-pg_test.go

cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (#16058)

2025-05-23 12:23:58 +01:00

svc-for-pg.go

cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (#16058)

2025-05-23 12:23:58 +01:00

svc.go

cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (#16058)

2025-05-23 12:23:58 +01:00

testutils_test.go

cmd/k8s-operator: fix Tailscale Service API errors check (#16020)

2025-05-20 11:30:45 +01:00

tsclient.go

cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet without the feature enabled (#15931)

2025-05-14 18:25:08 +01:00

tsrecorder_specs_test.go

cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299)

2024-09-11 12:19:29 +01:00

tsrecorder_specs.go

{cmd,}/k8s-operator: support IRSA for Recorder resources (#15913)

2025-05-19 11:35:05 +01:00

tsrecorder_test.go

{cmd,}/k8s-operator: support IRSA for Recorder resources (#15913)

2025-05-19 11:35:05 +01:00

tsrecorder.go

{cmd,}/k8s-operator: support IRSA for Recorder resources (#15913)

2025-05-19 11:35:05 +01:00