Irbe Krumina 6b97e615d6

cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897) ...

cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services

This PR is part of the work to implement HA for Kubernetes Operator's
network layer proxy.
Adds logic to containerboot to monitor mounted ingress firewall configuration rules
and update iptables/nftables rules as the config changes.
Also adds new shared types for the ingress configuration.
The implementation is intentionally similar to that for HA for egress proxy.

Updates tailscale/tailscale#15895

Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: Irbe Krumina <irbe@tailscale.com>

2025-05-19 10:42:03 +01:00

..

certs_test.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

certs.go

cmd/{k8s-operator,containerboot}: check TLS cert before advertising VIPService (#15427)

2025-03-26 01:32:13 +00:00

egressservices_test.go

cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)

2025-05-19 10:42:03 +01:00

egressservices.go

cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)

2025-05-19 10:42:03 +01:00

forwarding.go

cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658)

2024-10-03 20:15:00 +01:00

healthz.go

cmd/{containerboot,k8s-operator},kube/kubetypes: unadvertise ingress services on shutdown (#15451)

2025-04-09 10:11:15 +01:00

ingressservices_test.go

cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)

2025-05-19 10:42:03 +01:00

ingressservices.go

cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)

2025-05-19 10:42:03 +01:00

kube_test.go

cmd/containerboot: wait for consistent state on shutdown (#14263)

2025-01-30 13:51:10 +00:00

kube.go

cmd/containerboot: wait for consistent state on shutdown (#14263)

2025-01-30 13:51:10 +00:00

main_test.go

cmd/containerboot: speed up tests (#14883)

2025-04-08 23:34:23 +01:00

main.go

cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)

2025-05-19 10:42:03 +01:00

metrics.go

cmd/{containerboot,k8s-operator},kube/kubetypes: unadvertise ingress services on shutdown (#15451)

2025-04-09 10:11:15 +01:00

serve_test.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

serve.go

cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)

2025-05-19 10:42:03 +01:00

services.go

cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)

2025-05-19 10:42:03 +01:00

settings.go

cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)

2025-05-19 10:42:03 +01:00

tailscaled.go

cmd/containerboot: speed up tests (#14883)

2025-04-08 23:34:23 +01:00

test_tailscale.sh

cmd/containerboot: make a tests table, add more tests.

2022-11-10 09:14:27 -08:00

test_tailscaled.sh

cmd/containerboot: avoid leaking bash scripts after test runs

2023-09-21 13:17:48 -07:00