Irbe Krumina a622debe9b

cmd/{k8s-operator,containerboot}: check TLS cert before advertising VIPService (#15427) ...

cmd/{k8s-operator,containerboot}: check TLS cert before advertising VIPService

- Ensures that Ingress status does not advertise port 443 before
TLS cert has been issued
- Ensure that Ingress backends do not advertise a VIPService
before TLS cert has been issued, unless the service also
exposes port 80

Updates tailscale/corp#24795

Signed-off-by: Irbe Krumina <irbe@tailscale.com>

2025-03-26 01:32:13 +00:00

..

certs_test.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

certs.go

cmd/{k8s-operator,containerboot}: check TLS cert before advertising VIPService (#15427)

2025-03-26 01:32:13 +00:00

forwarding.go

cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed (#13658)

2024-10-03 20:15:00 +01:00

healthz.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)

2025-01-29 07:35:50 +00:00

kube_test.go

cmd/containerboot: wait for consistent state on shutdown (#14263)

2025-01-30 13:51:10 +00:00

kube.go

cmd/containerboot: wait for consistent state on shutdown (#14263)

2025-01-30 13:51:10 +00:00

main_test.go

cmd/containerboot: wait for consistent state on shutdown (#14263)

2025-01-30 13:51:10 +00:00

main.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

metrics.go

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

serve_test.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

serve.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

services_test.go

cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436)

2025-01-29 07:35:50 +00:00

services.go

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

settings.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

tailscaled.go

cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)

2025-03-14 17:33:08 +00:00

test_tailscale.sh

cmd/containerboot: make a tests table, add more tests.

2022-11-10 09:14:27 -08:00

test_tailscaled.sh

cmd/containerboot: avoid leaking bash scripts after test runs

2023-09-21 13:17:48 -07:00