tailscale/cmd/k8s-operator
David Bond cf0460b9da
cmd/k8s-operator: allow letsencrypt staging on k8s proxies (#16521)
This commit modifies the operator to detect the usage of k8s-apiserver
type proxy groups that wish to use the letsencrypt staging directory and
apply the appropriate environment variable to the statefulset it
produces.

Updates #13358

Signed-off-by: David Bond <davidsbond93@gmail.com>
2025-07-10 14:33:13 +01:00
..
deploy cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) 2025-07-09 09:21:56 +01:00
e2e cmd,tsnet,internal/client: create internal shim to deprecated control plane API 2025-02-18 10:23:04 -06:00
generate cmd/k8s-operator,k8s-operator: add ProxyGroup CRD (#13591) 2024-09-27 01:05:56 +01:00
connector_test.go cmd/k8s-operator: remove conffile hashing mechanism (#16335) 2025-06-20 10:34:47 +01:00
connector.go cmd/k8s-operator: Allow configuration of login server (#16432) 2025-07-02 21:42:31 +01:00
depaware.txt cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) 2025-07-09 09:21:56 +01:00
dnsrecords_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 2025-03-19 12:49:31 +00:00
dnsrecords.go cmd/k8s-operator: don't error for transient failures (#14073) 2024-12-05 12:11:22 +00:00
egress-eps_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 2025-01-17 05:37:53 +00:00
egress-eps.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 2025-01-29 07:35:50 +00:00
egress-pod-readiness_test.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 2025-03-19 12:49:31 +00:00
egress-pod-readiness.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 2025-03-19 12:49:31 +00:00
egress-services_test.go cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't terminate while cluster traffic is still routed to them (#14436) 2025-01-29 07:35:50 +00:00
egress-services-readiness_test.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 2025-06-27 18:10:04 +01:00
egress-services-readiness.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 2025-06-27 18:10:04 +01:00
egress-services.go cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) 2025-06-27 18:10:04 +01:00
ingress_test.go cmd/k8s-operator: Allow custom ingress class names (#16472) 2025-07-07 12:12:59 +01:00
ingress-for-pg_test.go cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) 2025-07-09 09:21:56 +01:00
ingress-for-pg.go cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) 2025-07-09 09:21:56 +01:00
ingress.go cmd/k8s-operator: Allow custom ingress class names (#16472) 2025-07-07 12:12:59 +01:00
metrics_resources.go cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308) 2025-03-19 12:49:31 +00:00
nameserver_test.go go.{mod,sum},cmd/{k8s-operator,derper,stund}/depaware.txt: bump kube deps (#14601) 2025-01-17 05:37:53 +00:00
nameserver.go cmd/k8s-operator: ensure status update errors are displayed to users (#16251) 2025-06-12 13:47:34 +01:00
nodeport-service-ports.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 2025-06-27 17:12:14 +01:00
nodeport-services-ports_test.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 2025-06-27 17:12:14 +01:00
operator_test.go cmd/k8s-operator: Allow custom ingress class names (#16472) 2025-07-07 12:12:59 +01:00
operator.go cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) 2025-07-09 09:21:56 +01:00
proxy.go cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) 2025-07-09 09:21:56 +01:00
proxyclass_test.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 2025-06-27 17:12:14 +01:00
proxyclass.go cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) 2025-06-27 17:12:14 +01:00
proxygroup_specs.go cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) 2025-07-09 09:21:56 +01:00
proxygroup_test.go cmd/k8s-operator: don't require generation for Available condition (#16497) 2025-07-09 09:37:45 +01:00
proxygroup.go cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) 2025-07-09 09:21:56 +01:00
sts_test.go cmd/k8s-operator: allow letsencrypt staging on k8s proxies (#16521) 2025-07-10 14:33:13 +01:00
sts.go cmd/k8s-operator: allow letsencrypt staging on k8s proxies (#16521) 2025-07-10 14:33:13 +01:00
svc-for-pg_test.go cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) 2025-07-09 09:21:56 +01:00
svc-for-pg.go cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) 2025-07-09 09:21:56 +01:00
svc.go cmd/k8s-operator: Allow configuration of login server (#16432) 2025-07-02 21:42:31 +01:00
testutils_test.go cmd/k8s-operator: remove conffile hashing mechanism (#16335) 2025-06-20 10:34:47 +01:00
tsclient.go cmd/k8s-operator: Allow configuration of login server (#16432) 2025-07-02 21:42:31 +01:00
tsrecorder_specs_test.go cmd/k8s-operator: Set login server on tsrecorder nodes (#16443) 2025-07-03 15:53:35 +01:00
tsrecorder_specs.go cmd/k8s-operator: Set login server on tsrecorder nodes (#16443) 2025-07-03 15:53:35 +01:00
tsrecorder_test.go cmd/k8s-operator: Set login server on tsrecorder nodes (#16443) 2025-07-03 15:53:35 +01:00
tsrecorder.go cmd/k8s-operator: Set login server on tsrecorder nodes (#16443) 2025-07-03 15:53:35 +01:00