TheArchive/tailscale
1
0
Fork 0
mirror of https://github.com/tailscale/tailscale.git synced 2025-01-10 01:53:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
tailscale/cmd/k8s-operator/deploy
History
Irbe Krumina eabb424275
cmd/k8s-operator,docs/k8s: run tun mode proxies in privileged containers (#14262) 
We were previously relying on unintended behaviour by runc where
all containers where by default given read/write/mknod permissions
for tun devices.
This behaviour was removed in https://github.com/opencontainers/runc/pull/3468
and released in runc 1.2.
Containerd container runtime, used by Docker and majority of Kubernetes distributions
bumped runc to 1.2 in 1.7.24 https://github.com/containerd/containerd/releases/tag/v1.7.24
thus breaking our reference tun mode Tailscale Kubernetes manifests and Kubernetes
operator proxies.

This PR changes the all Kubernetes container configs that run Tailscale in tun mode
to privileged. This should not be a breaking change because all these containers would
run in a Pod that already has a privileged init container.

Updates tailscale/tailscale#14256
Updates tailscale/tailscale#10814

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
2024-12-03 07:01:14 +00:00
..
chart
cmd/k8s-operator/deploy: ensure that operator can write kube state Events (#14177)
2024-11-22 06:53:46 +00:00
crds
cmd/k8s-operator,docs/k8s: run tun mode proxies in privileged containers (#14262)
2024-12-03 07:01:14 +00:00
examples
cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller (#13684)
2024-10-07 14:58:45 +01:00
manifests
cmd/k8s-operator,docs/k8s: run tun mode proxies in privileged containers (#14262)
2024-12-03 07:01:14 +00:00
README.md
cmd/k8s-operator: generate static kube manifests from the Helm chart. (#10436)
2023-12-04 10:18:07 +00:00

README.md

Tailscale Kubernetes operator deployment manifests

./cmd/k8s-operator/deploy contain various Tailscale Kubernetes operator deployment manifests.

Helm chart

./cmd/k8s-operator/deploy/chart contains Tailscale operator Helm chart templates. The chart templates are also used to generate the static manifest, so developers must ensure that any changes applied to the chart have been propagated to the static manifest by running go generate tailscale.com/cmd/k8s-operator

Static manifests

./cmd/k8s-operator/deploy/manifests/operator.yaml is a static manifest for the operator generated from the Helm chart templates for the operator.