Maisem Ali 24509f8b22 cmd/k8s-operator: add support for control plane assigned groups ... Previously we would use the Impersonate-Group header to pass through tags to the k8s api server. However, we would do nothing for non-tagged nodes. Now that we have a way to specify these via peerCaps respect those and send down groups for non-tagged nodes as well. For tagged nodes, it defaults to sending down the tags as groups to retain legacy behavior if there are no caps set. Otherwise, the tags are omitted. Updates #5055 Signed-off-by: Maisem Ali <maisem@tailscale.com>		2023-08-16 19:40:47 -04:00
..
manifests	cmd/k8s-operator: make auth proxy pass tags as Impersonate-Group	2023-03-13 12:32:12 -07:00
operator_test.go	cmd/k8s-operator: update controller-runtime to v0.15	2023-06-01 05:51:25 -07:00
operator.go	cmd/k8s-operator: update controller-runtime to v0.15	2023-06-01 05:51:25 -07:00
proxy_test.go	cmd/k8s-operator: add support for control plane assigned groups	2023-08-16 19:40:47 -04:00
proxy.go	cmd/k8s-operator: add support for control plane assigned groups	2023-08-16 19:40:47 -04:00