tailscale/cmd/k8s-operator
Tom Proctor 2d1f6f18cc
cmd/k8s-operator: require namespace config (#14648)
Most users should not run into this because it's set in the helm chart
and the deploy manifest, but if namespace is not set we get confusing
authz errors because the kube client tries to fetch some namespaced resources
as though they're cluster-scoped and reports permission denied. Try to
detect namespace from the default projected volume, and otherwise fatal.

Fixes #cleanup

Change-Id: I64b34191e440b61204b9ad30bbfa117abbbe09c3

Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>
2025-01-16 11:15:36 +00:00
..
deploy cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475) 2025-01-09 07:15:19 +00:00
e2e cmd/k8s-operator,k8s-operator: operator integration tests (#12792) 2024-12-11 14:48:57 +00:00
generate cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591) 2024-09-27 01:05:56 +01:00
connector_test.go cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475) 2025-01-09 07:15:19 +00:00
connector.go cmd/k8s-operator: don't error for transient failures (#14073) 2024-12-05 12:11:22 +00:00
depaware.txt atomicfile: use ReplaceFile on Windows so that attributes and ACLs are preserved 2025-01-15 13:57:37 -05:00
dnsrecords_test.go cmd/k8s-operator: fix DNS reconciler for dual-stack clusters (#13057) 2024-08-13 18:42:01 +01:00
dnsrecords.go cmd/k8s-operator: don't error for transient failures (#14073) 2024-12-05 12:11:22 +00:00
egress-eps_test.go cmd/k8s-operator: fix Pod IP selection (#13743) 2024-10-09 13:22:50 +01:00
egress-eps.go cmd/k8s-operator: fix Pod IP selection (#13743) 2024-10-09 13:22:50 +01:00
egress-services_test.go cmd/k8s-operator: fix port name change bug for egress ProxyGroup proxies (#14247) 2024-11-29 10:37:25 +00:00
egress-services-readiness_test.go cmd/k8s-operator,k8s-operator/apis: set a readiness condition on egress Services for ProxyGroup (#13746) 2024-10-09 18:23:40 +01:00
egress-services-readiness.go cmd/k8s-operator: fix a bunch of status equality checks (#14270) 2024-12-04 06:46:51 +00:00
egress-services.go cmd/k8s-operator,k8s-operator: support ingress ProxyGroup type (#14548) 2025-01-08 13:43:17 +00:00
ingress_test.go cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475) 2025-01-09 07:15:19 +00:00
ingress.go cmd/k8s-operator: don't error for transient failures (#14073) 2024-12-05 12:11:22 +00:00
metrics_resources.go cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475) 2025-01-09 07:15:19 +00:00
nameserver_test.go cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299) 2024-09-11 12:19:29 +01:00
nameserver.go cmd/k8s-operator: don't error for transient failures (#14073) 2024-12-05 12:11:22 +00:00
operator_test.go cmd/containerboot,cmd/k8s-operator: reload tailscaled config (#14342) 2025-01-10 07:29:11 +00:00
operator.go cmd/k8s-operator: require namespace config (#14648) 2025-01-16 11:15:36 +00:00
proxy_test.go cmd/k8s-operator,ssh/tailssh,tsnet: optionally record 'kubectl exec' sessions via Kubernetes operator's API server proxy (#12274) 2024-07-08 21:18:55 +01:00
proxy.go all: fix golangci-lint errors 2025-01-07 13:05:37 -08:00
proxyclass_test.go cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475) 2025-01-09 07:15:19 +00:00
proxyclass.go cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475) 2025-01-09 07:15:19 +00:00
proxygroup_specs.go cmd/containerboot,cmd/k8s-operator: reload tailscaled config (#14342) 2025-01-10 07:29:11 +00:00
proxygroup_test.go cmd/containerboot,cmd/k8s-operator: reload tailscaled config (#14342) 2025-01-10 07:29:11 +00:00
proxygroup.go cmd/containerboot,cmd/k8s-operator: reload tailscaled config (#14342) 2025-01-10 07:29:11 +00:00
sts_test.go cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475) 2025-01-09 07:15:19 +00:00
sts.go cmd/containerboot,cmd/k8s-operator: reload tailscaled config (#14342) 2025-01-10 07:29:11 +00:00
svc.go cmd/k8s-operator: don't error for transient failures (#14073) 2024-12-05 12:11:22 +00:00
testutils_test.go cmd/containerboot,cmd/k8s-operator: reload tailscaled config (#14342) 2025-01-10 07:29:11 +00:00
tsrecorder_specs_test.go cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299) 2024-09-11 12:19:29 +01:00
tsrecorder_specs.go cmd/k8s-operator,kube/kubeclient,docs/k8s: update rbac to emit events + small fixes (#14164) 2024-11-20 14:22:34 +00:00
tsrecorder_test.go cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller (#13684) 2024-10-07 14:58:45 +01:00
tsrecorder.go cmd/k8s-operator: don't error for transient failures (#14073) 2024-12-05 12:11:22 +00:00