Irbe Krumina ba517ab388 cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274) ... cmd/k8s-operator,ssh/tailssh,tsnet: optionally record kubectl exec sessions The Kubernetes operator's API server proxy, when it receives a request for 'kubectl exec' session now reads 'RecorderAddrs', 'EnforceRecorder' fields from tailcfg.KubernetesCapRule. If 'RecorderAddrs' is set to one or more addresses (of a tsrecorder instance(s)), it attempts to connect to those and sends the session contents to the recorder before forwarding the request to the kube API server. If connection cannot be established or fails midway, it is only allowed if 'EnforceRecorder' is not true (fail open). Updates tailscale/corp#19821 Signed-off-by: Irbe Krumina <irbe@tailscale.com> Co-authored-by: Maisem Ali <maisem@tailscale.com>		2024-07-08 21:18:55 +01:00
..
testcontainers	ssh/tailssh: replace incubator process with su instead of running su as child	2024-06-20 10:11:03 -05:00
connect.go	cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274)	2024-07-08 21:18:55 +01:00
incubator_linux.go	ssh/tailssh: fall back to using su when no TTY available on Linux	2024-05-29 13:15:17 -05:00
incubator.go	ssh/tailssh: replace incubator process with su instead of running su as child	2024-06-20 10:11:03 -05:00
privs_test.go	ssh/tailssh: fall back to using su when no TTY available on Linux	2024-05-29 13:15:17 -05:00
tailssh_integration_test.go	ssh/tailssh: fix integration test (#12562)	2024-06-20 19:30:19 +01:00
tailssh_test.go	proxymap, various: distinguish between different protocols	2024-06-18 13:29:41 -04:00
tailssh.go	cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274)	2024-07-08 21:18:55 +01:00
user.go	ssh/tailssh: try fetching group IDs for user with the 'id' command	2024-04-23 08:54:17 -05:00