Irbe Krumina eabb424275 cmd/k8s-operator,docs/k8s: run tun mode proxies in privileged containers (#14262) ... We were previously relying on unintended behaviour by runc where all containers where by default given read/write/mknod permissions for tun devices. This behaviour was removed in https://github.com/opencontainers/runc/pull/3468 and released in runc 1.2. Containerd container runtime, used by Docker and majority of Kubernetes distributions bumped runc to 1.2 in 1.7.24 https://github.com/containerd/containerd/releases/tag/v1.7.24 thus breaking our reference tun mode Tailscale Kubernetes manifests and Kubernetes operator proxies. This PR changes the all Kubernetes container configs that run Tailscale in tun mode to privileged. This should not be a breaking change because all these containers would run in a Pod that already has a privileged init container. Updates tailscale/tailscale#14256 Updates tailscale/tailscale#10814 Signed-off-by: Irbe Krumina <irbe@tailscale.com>		2024-12-03 07:01:14 +00:00
..
addlicense	all: update tools that manage copyright headers	2023-01-27 15:36:29 -08:00
build-webclient	client/web: precompress assets	2023-12-07 20:57:31 -05:00
checkmetrics	cmd/checkmetrics: add command for checking metrics against kb	2024-12-02 10:30:46 +01:00
cloner	cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types	2024-08-23 15:43:40 -05:00
connector-gen	cmd/connector-gen: add helper tool for wide app connector configurations	2023-12-15 09:29:42 -08:00
containerboot	cmd/containerboot: serve health on local endpoint (#14246)	2024-12-02 12:18:09 +00:00
derper	tsweb: change RequestID format to have a date in it	2024-11-20 15:55:09 -08:00
derpprobe	cmd/derpprobe,prober: add ability to restrict derpprobe to a single region	2024-11-15 13:42:58 -06:00
dist	release/dist/qnap: add qnap target builder	2024-04-22 17:43:28 -04:00
get-authkey	client/tailscale,cmd/{cli,get-authkey,k8s-operator}: set distinct User-Agents	2024-10-11 10:45:03 -05:00
gitops-pusher	cmd/gitops-pusher: ignore previous etag if local acls match control (#13068)	2024-08-08 13:23:06 -07:00
hello	cmd/hello: link to the Hello KB article (#11022)	2024-02-02 15:48:31 -08:00
k8s-nameserver	cmd/k8s-nameserver: fix AAAA record query response (#12412)	2024-06-10 17:57:22 +01:00
k8s-operator	cmd/k8s-operator,docs/k8s: run tun mode proxies in privileged containers (#14262)	2024-12-03 07:01:14 +00:00
mkmanifest	cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS	2023-03-01 15:45:12 -07:00
mkpkg	go.mod: upgrade nfpm to v2 (#8786)	2023-08-03 13:00:45 -07:00
mkversion	version/mkversion: open-source version generation logic	2023-02-18 05:21:05 +00:00
nardump	all: update copyright and license headers	2023-01-27 15:36:29 -08:00
natc	cmd/natc: fix nil pointer	2024-09-17 09:48:48 -07:00
netlogfmt	all: use Go 1.22 range-over-int	2024-04-16 15:32:38 -07:00
nginx-auth	tailcfg,all: add and use Node.IsTagged()	2023-03-13 08:44:25 -07:00
pgproxy	tsnet: split user facing and backend logging	2024-05-10 15:29:13 -07:00
printdep	cmd/printdep: print correct toolchain URL	2023-02-11 17:57:36 +00:00
proxy-to-grafana	cmd/proxy-to-grafana: add flag for alternative control server	2024-06-21 12:17:39 +02:00
sniproxy	all: use math/rand/v2 more	2024-06-05 15:24:04 -07:00
speedtest	all: update copyright and license headers	2023-01-27 15:36:29 -08:00
ssh-auth-none-demo	all: replace deprecated ioutil references	2023-08-23 23:53:19 +01:00
stunc	cmd/stunc: support user-specified port (#12469)	2024-06-14 09:46:16 -07:00
stund	tsweb: change RequestID format to have a date in it	2024-11-20 15:55:09 -08:00
stunstamp	cmd/stunstamp: add protocol context to timeout logs (#13422)	2024-09-09 18:42:13 -07:00
sync-containers	all: adjust some build tags for plan9	2023-08-24 15:42:35 -07:00
systray	cmd/systray: handle reconnects to IPN bus (#13386)	2024-09-05 10:11:05 -07:00
tailscale	cmd/tailscale/cli: fix format string	2024-11-26 16:11:46 -06:00
tailscaled	cmd/tailscaled: log SCM interactions if the policy setting is enabled at the time of interaction	2024-11-22 14:37:38 -06:00
testcontrol	all: use Go 1.22 range-over-int	2024-04-16 15:32:38 -07:00
testwrapper	cmd/testwrapper: add pkg runtime to output (#13894)	2024-10-24 09:41:54 -05:00
tl-longchain	cmd/tl-longchain: tool to re-sign nodes with long rotation signatures	2024-08-21 18:22:22 +01:00
tsconnect	all: use iterators over slice views more	2024-11-11 13:22:34 -08:00
tsidp	cmd/tsidp: add --dir flag	2024-09-29 16:15:22 -07:00
tsshd	all: update copyright and license headers	2023-01-27 15:36:29 -08:00
tta	cmd/tta: pull out test driver dialing into a type, fix bugs	2024-08-26 15:36:30 -07:00
viewer	cmd/viewer: import types/views when generating a getter for a map field	2024-10-21 16:29:16 -05:00
vnet	tstest/natlab/vnet: add start of IPv6 support	2024-08-24 18:02:38 -07:00
xdpderper	all: add test for package comments, fix, add comments as needed	2024-07-10 09:57:00 -07:00