mirror of https://github.com/tailscale/tailscale.git synced 2025-05-28 10:18:29 +00:00

History

{cmd,}/k8s-operator: support IRSA for Recorder resources (#15913 )

Adds Recorder fields to configure the name and annotations of the ServiceAccount
created for and used by its associated StatefulSet. This allows the created Pod
to authenticate with AWS without requiring a Secret with static credentials,
using AWS' IAM Roles for Service Accounts feature, documented here:
https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html

Fixes #15875

Change-Id: Ib0e15c0dbc357efa4be260e9ae5077bacdcb264f
Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>

2025-05-19 11:35:05 +01:00

chart

cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308 )

2025-03-19 12:49:31 +00:00

crds

{cmd,}/k8s-operator: support IRSA for Recorder resources (#15913 )

2025-05-19 11:35:05 +01:00

examples

cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller (#13684 )

2024-10-07 14:58:45 +01:00

manifests

{cmd,}/k8s-operator: support IRSA for Recorder resources (#15913 )

2025-05-19 11:35:05 +01:00

README.md

cmd/k8s-operator: generate static kube manifests from the Helm chart. (#10436 )

2023-12-04 10:18:07 +00:00

README.md

Tailscale Kubernetes operator deployment manifests

./cmd/k8s-operator/deploy contain various Tailscale Kubernetes operator deployment manifests.

Helm chart

./cmd/k8s-operator/deploy/chart contains Tailscale operator Helm chart templates. The chart templates are also used to generate the static manifest, so developers must ensure that any changes applied to the chart have been propagated to the static manifest by running go generate tailscale.com/cmd/k8s-operator

Static manifests

./cmd/k8s-operator/deploy/manifests/operator.yaml is a static manifest for the operator generated from the Helm chart templates for the operator.