tailscale

mirror of https://github.com/tailscale/tailscale.git synced 2025-02-20 11:58:39 +00:00

History

cmd/containerboot: wait for consistent state on shutdown (#14263 )

tailscaled's ipn package writes a collection of keys to state after
authenticating to control, but one at a time. If containerboot happens
to send a SIGTERM signal to tailscaled in the middle of writing those
keys, it may shut down with an inconsistent state Secret and never
recover. While we can't durably fix this with our current single-use
auth keys (no atomic operation to auth + write state), we can reduce
the window for this race condition by checking for partial state
before sending SIGTERM to tailscaled. Best effort only.

Updates #14080

Change-Id: I0532d51b6f0b7d391e538468bd6a0a80dbe1d9f7
Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>

2025-01-30 13:51:10 +00:00

forwarding.go

cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658 )

2024-10-03 20:15:00 +01:00

healthz.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436 )

2025-01-29 07:35:50 +00:00

kube_test.go

cmd/containerboot: wait for consistent state on shutdown (#14263 )

2025-01-30 13:51:10 +00:00

kube.go

cmd/containerboot: wait for consistent state on shutdown (#14263 )