tailscale/cmd/containerboot
Irbe Krumina a622debe9b
cmd/{k8s-operator,containerboot}: check TLS cert before advertising VIPService (#15427)
cmd/{k8s-operator,containerboot}: check TLS cert before advertising VIPService

- Ensures that Ingress status does not advertise port 443 before
TLS cert has been issued
- Ensure that Ingress backends do not advertise a VIPService
before TLS cert has been issued, unless the service also
exposes port 80

Updates tailscale/corp#24795

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
2025-03-26 01:32:13 +00:00
..
certs_test.go cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303) 2025-03-14 17:33:08 +00:00
certs.go cmd/{k8s-operator,containerboot}: check TLS cert before advertising VIPService (#15427) 2025-03-26 01:32:13 +00:00
forwarding.go cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658) 2024-10-03 20:15:00 +01:00
healthz.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 2025-01-29 07:35:50 +00:00
kube_test.go cmd/containerboot: wait for consistent state on shutdown (#14263) 2025-01-30 13:51:10 +00:00
kube.go cmd/containerboot: wait for consistent state on shutdown (#14263) 2025-01-30 13:51:10 +00:00
main_test.go cmd/containerboot: wait for consistent state on shutdown (#14263) 2025-01-30 13:51:10 +00:00
main.go cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303) 2025-03-14 17:33:08 +00:00
metrics.go all: use new LocalAPI client package location 2025-02-05 14:41:42 -08:00
serve_test.go cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303) 2025-03-14 17:33:08 +00:00
serve.go cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303) 2025-03-14 17:33:08 +00:00
services_test.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 2025-01-29 07:35:50 +00:00
services.go all: use new LocalAPI client package location 2025-02-05 14:41:42 -08:00
settings.go cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303) 2025-03-14 17:33:08 +00:00
tailscaled.go cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303) 2025-03-14 17:33:08 +00:00
test_tailscale.sh cmd/containerboot: make a tests table, add more tests. 2022-11-10 09:14:27 -08:00
test_tailscaled.sh cmd/containerboot: avoid leaking bash scripts after test runs 2023-09-21 13:17:48 -07:00