Irbe Krumina ba517ab388 cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274) ... cmd/k8s-operator,ssh/tailssh,tsnet: optionally record kubectl exec sessions The Kubernetes operator's API server proxy, when it receives a request for 'kubectl exec' session now reads 'RecorderAddrs', 'EnforceRecorder' fields from tailcfg.KubernetesCapRule. If 'RecorderAddrs' is set to one or more addresses (of a tsrecorder instance(s)), it attempts to connect to those and sends the session contents to the recorder before forwarding the request to the kube API server. If connection cannot be established or fails midway, it is only allowed if 'EnforceRecorder' is not true (fail open). Updates tailscale/corp#19821 Signed-off-by: Irbe Krumina <irbe@tailscale.com> Co-authored-by: Maisem Ali <maisem@tailscale.com>		2024-07-08 21:18:55 +01:00
..
addlicense	all: update tools that manage copyright headers	2023-01-27 15:36:29 -08:00
build-webclient	client/web: precompress assets	2023-12-07 20:57:31 -05:00
cloner	all: use Go 1.22 range-over-int	2024-04-16 15:32:38 -07:00
connector-gen	cmd/connector-gen: add helper tool for wide app connector configurations	2023-12-15 09:29:42 -08:00
containerboot	cmd/containerboot,cmd/k8s-operator: enable IPv6 for fqdn egress proxies (#12577)	2024-07-05 12:21:48 +01:00
derper	cmd/derper: clarify that derper and tailscaled need to be in sync	2024-06-26 19:46:42 -07:00
derpprobe	cmd/derpprobe: support 'local' derpmap to get derp map via LocalAPI	2024-06-06 13:14:27 -07:00
dist	release/dist/qnap: add qnap target builder	2024-04-22 17:43:28 -04:00
get-authkey	util/cmpx: delete now that we're using Go 1.22	2024-02-07 18:10:15 -08:00
gitops-pusher	cmd/gitops-pusher: only use OAuth creds if non-empty string	2024-02-09 10:55:59 -05:00
hello	cmd/hello: link to the Hello KB article (#11022)	2024-02-02 15:48:31 -08:00
k8s-nameserver	cmd/k8s-nameserver: fix AAAA record query response (#12412)	2024-06-10 17:57:22 +01:00
k8s-operator	cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274)	2024-07-08 21:18:55 +01:00
mkmanifest	cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS	2023-03-01 15:45:12 -07:00
mkpkg	go.mod: upgrade nfpm to v2 (#8786)	2023-08-03 13:00:45 -07:00
mkversion	version/mkversion: open-source version generation logic	2023-02-18 05:21:05 +00:00
nardump	all: update copyright and license headers	2023-01-27 15:36:29 -08:00
natc	cmd/natc: add --wg-port flag	2024-06-05 15:45:31 -07:00
netlogfmt	all: use Go 1.22 range-over-int	2024-04-16 15:32:38 -07:00
nginx-auth	tailcfg,all: add and use Node.IsTagged()	2023-03-13 08:44:25 -07:00
pgproxy	tsnet: split user facing and backend logging	2024-05-10 15:29:13 -07:00
printdep	cmd/printdep: print correct toolchain URL	2023-02-11 17:57:36 +00:00
proxy-to-grafana	cmd/proxy-to-grafana: add flag for alternative control server	2024-06-21 12:17:39 +02:00
sniproxy	all: use math/rand/v2 more	2024-06-05 15:24:04 -07:00
speedtest	all: update copyright and license headers	2023-01-27 15:36:29 -08:00
ssh-auth-none-demo	all: replace deprecated ioutil references	2023-08-23 23:53:19 +01:00
stunc	cmd/stunc: support user-specified port (#12469)	2024-06-14 09:46:16 -07:00
stund	types/lazy: add Peek method to SyncValue	2024-06-24 12:41:00 -07:00
stunstamp	cmd/stunstamp: fix handling of invalid DERP map resp (#12679)	2024-07-01 16:07:48 -07:00
sync-containers	all: adjust some build tags for plan9	2023-08-24 15:42:35 -07:00
tailscale	cmd/tailscale/cli: exit node filter should display all exit node options (#12699)	2024-07-03 11:48:20 -07:00
tailscaled	net/netns: add Windows support for bind-to-interface-by-route	2024-06-24 10:43:34 -06:00
testcontrol	all: use Go 1.22 range-over-int	2024-04-16 15:32:38 -07:00
testwrapper	cmd/testwrapper: apply results of all unit tests to coverage for all packages	2024-02-21 13:08:17 -06:00
tsconnect	all: use math/rand/v2 more	2024-06-05 15:24:04 -07:00
tsidp	tsnet: split user facing and backend logging	2024-05-10 15:29:13 -07:00
tsshd	all: update copyright and license headers	2023-01-27 15:36:29 -08:00
viewer	cmd/viewer,type/views: add MapSlice for maps of slices	2024-06-15 22:24:29 -07:00
xdpderper	cmd/xdpderper: add autodetection for default interface name	2024-06-27 15:42:11 -07:00