Tom Meadows 2fc247573b

cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363) ...

* cmd/k8s-operator: ProxyClass annotation for Services and Ingresses

Previously, the ProxyClass could only be configured for Services and
Ingresses via a Label. This adds the ability to set it via an
Annotation, but prioritizes the Label if both a Label and Annotation are
set.

Updates #14323

Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>

* Update cmd/k8s-operator/operator.go

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
Signed-off-by: Tom Meadows <tom@tmlabs.co.uk>

* Update cmd/k8s-operator/operator.go

Signed-off-by: Tom Meadows <tom@tmlabs.co.uk>

* cmd/k8s-operator: ProxyClass annotation for Services and Ingresses

Previously, the ProxyClass could only be configured for Services and
Ingresses via a Label. This adds the ability to set it via an
Annotation, but prioritizes the Label if both a Label and Annotation are
set.

Updates #14323

Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>

---------

Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: Tom Meadows <tom@tmlabs.co.uk>
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

2025-06-30 12:08:35 +01:00

..

deploy

cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)

2025-06-27 17:12:14 +01:00

e2e

cmd,tsnet,internal/client: create internal shim to deprecated control plane API

2025-02-18 10:23:04 -06:00

generate

cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591)

2024-09-27 01:05:56 +01:00

connector_test.go

cmd/k8s-operator: remove conffile hashing mechanism (#16335)

2025-06-20 10:34:47 +01:00

connector.go

cmd/k8s-operator: don't error for transient failures (#14073)

2024-12-05 12:11:22 +00:00

depaware.txt

cmd/tailscale/cli: add a risk message about rp_filter

2025-06-10 07:38:06 +01:00

dnsrecords_test.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

dnsrecords.go

cmd/k8s-operator: don't error for transient failures (#14073)

2024-12-05 12:11:22 +00:00

egress-eps_test.go

go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)

2025-01-17 05:37:53 +00:00

egress-eps.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)

2025-01-29 07:35:50 +00:00

egress-pod-readiness_test.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

egress-pod-readiness.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

egress-services_test.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)

2025-01-29 07:35:50 +00:00

egress-services-readiness_test.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

egress-services-readiness.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

egress-services.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

ingress_test.go

cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363)

2025-06-30 12:08:35 +01:00

ingress-for-pg_test.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

ingress-for-pg.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

ingress.go

cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363)

2025-06-30 12:08:35 +01:00

metrics_resources.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

nameserver_test.go

go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601)

2025-01-17 05:37:53 +00:00

nameserver.go

cmd/k8s-operator: ensure status update errors are displayed to users (#16251)

2025-06-12 13:47:34 +01:00

nodeport-service-ports.go

cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)

2025-06-27 17:12:14 +01:00

nodeport-services-ports_test.go

cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)

2025-06-27 17:12:14 +01:00

operator_test.go

cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363)

2025-06-30 12:08:35 +01:00

operator.go

cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363)

2025-06-30 12:08:35 +01:00

proxyclass_test.go

cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)

2025-06-27 17:12:14 +01:00

proxyclass.go

cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)

2025-06-27 17:12:14 +01:00

proxygroup_specs.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

proxygroup_test.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

proxygroup.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

sts_test.go

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)

2025-03-19 12:49:31 +00:00

sts.go

cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363)

2025-06-30 12:08:35 +01:00

svc-for-pg_test.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

svc-for-pg.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

svc.go

cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363)

2025-06-30 12:08:35 +01:00

testutils_test.go

cmd/k8s-operator: remove conffile hashing mechanism (#16335)

2025-06-20 10:34:47 +01:00

tsclient.go

cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet without the feature enabled (#15931)

2025-05-14 18:25:08 +01:00

tsrecorder_specs_test.go

cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299)

2024-09-11 12:19:29 +01:00

tsrecorder_specs.go

{cmd,}/k8s-operator: support IRSA for Recorder resources (#15913)

2025-05-19 11:35:05 +01:00

tsrecorder_test.go

{cmd,}/k8s-operator: support IRSA for Recorder resources (#15913)

2025-05-19 11:35:05 +01:00

tsrecorder.go

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00