tailscale/cmd/k8s-operator
Irbe Krumina e29e3c150f
cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262)
Ensure that if the ProxyGroup for HA Ingress changes, the TLS Secret
and Role and RoleBinding that allow proxies to read/write to it are
updated.

Fixes #16259

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
2025-06-16 12:21:59 +01:00
..
deploy cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (#15961) 2025-05-19 12:58:32 +01:00
e2e cmd,tsnet,internal/client: create internal shim to deprecated control plane API 2025-02-18 10:23:04 -06:00
generate cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591) 2024-09-27 01:05:56 +01:00
connector_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 2025-01-17 05:37:53 +00:00
connector.go cmd/k8s-operator: don't error for transient failures (#14073) 2024-12-05 12:11:22 +00:00
depaware.txt cmd/tailscale/cli: add a risk message about rp_filter 2025-06-10 07:38:06 +01:00
dnsrecords_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 2025-03-19 12:49:31 +00:00
dnsrecords.go cmd/k8s-operator: don't error for transient failures (#14073) 2024-12-05 12:11:22 +00:00
egress-eps_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 2025-01-17 05:37:53 +00:00
egress-eps.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 2025-01-29 07:35:50 +00:00
egress-pod-readiness_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 2025-03-19 12:49:31 +00:00
egress-pod-readiness.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 2025-03-19 12:49:31 +00:00
egress-services_test.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 2025-01-29 07:35:50 +00:00
egress-services-readiness_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 2025-01-17 05:37:53 +00:00
egress-services-readiness.go cmd/k8s-operator: check that cluster traffic is routed to egress ProxyGroup Pod before marking it as ready (#14792) 2025-01-30 08:47:45 +00:00
egress-services.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 2025-03-19 12:49:31 +00:00
ingress_test.go cmd/k8s-operator: ensure status update errors are displayed to users (#16251) 2025-06-12 13:47:34 +01:00
ingress-for-pg_test.go cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262) 2025-06-16 12:21:59 +01:00
ingress-for-pg.go cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262) 2025-06-16 12:21:59 +01:00
ingress.go cmd/k8s-operator: default ingress paths to '/' if not specified by user (#15706) 2025-04-17 16:14:34 +01:00
metrics_resources.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 2025-03-19 12:49:31 +00:00
nameserver_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 2025-01-17 05:37:53 +00:00
nameserver.go cmd/k8s-operator: ensure status update errors are displayed to users (#16251) 2025-06-12 13:47:34 +01:00
operator_test.go cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (#16058) 2025-05-23 12:23:58 +01:00
operator.go cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (#15961) 2025-05-19 12:58:32 +01:00
proxyclass_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 2025-01-17 05:37:53 +00:00
proxyclass.go cmd/k8s-operator,k8s-operator: allow users to set custom labels for the optional ServiceMonitor (#14475) 2025-01-09 07:15:19 +00:00
proxygroup_specs.go cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (#15961) 2025-05-19 12:58:32 +01:00
proxygroup_test.go cmd/k8s-operator: ensure status update errors are displayed to users (#16251) 2025-06-12 13:47:34 +01:00
proxygroup.go cmd/k8s-operator: ensure status update errors are displayed to users (#16251) 2025-06-12 13:47:34 +01:00
sts_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 2025-03-19 12:49:31 +00:00
sts.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 2025-05-19 11:35:05 +01:00
svc-for-pg_test.go cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262) 2025-06-16 12:21:59 +01:00
svc-for-pg.go cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (#16058) 2025-05-23 12:23:58 +01:00
svc.go cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (#16058) 2025-05-23 12:23:58 +01:00
testutils_test.go cmd/k8s-operator: fix Tailscale Service API errors check (#16020) 2025-05-20 11:30:45 +01:00
tsclient.go cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet without the feature enabled (#15931) 2025-05-14 18:25:08 +01:00
tsrecorder_specs_test.go cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (#13299) 2024-09-11 12:19:29 +01:00
tsrecorder_specs.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 2025-05-19 11:35:05 +01:00
tsrecorder_test.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 2025-05-19 11:35:05 +01:00
tsrecorder.go {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) 2025-05-19 11:35:05 +01:00