Irbe Krumina cd391b37a6

ipn/ipnlocal, envknob: make it possible to configure the cert client to act in read-only mode (#15250) ...

* ipn/ipnlocal,envknob: add some primitives for HA replica cert share.

Add an envknob for configuring
an instance's cert store as read-only, so that it
does not attempt to issue or renew TLS credentials,
only reads them from its cert store.
This will be used by the Kubernetes Operator's HA Ingress
to enable multiple replicas serving the same HTTPS endpoint
to be able to share the same cert.

Also some minor refactor to allow adding more tests
for cert retrieval logic.


Signed-off-by: Irbe Krumina <irbe@tailscale.com>

2025-03-13 14:14:03 +00:00

..

featureknob

envknob/featureknob: allow use of exit node on unraid (#14754)

2025-01-26 15:35:58 +00:00

logknob

all: use iterators in more places instead of Range funcs

2025-01-04 11:01:00 -08:00

envknob_nottest.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

envknob_testable.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

envknob.go

ipn/ipnlocal, envknob: make it possible to configure the cert client to act in read-only mode (#15250)

2025-03-13 14:14:03 +00:00