* cmd/containerboot: guard kubeClient against nil dereference (#14357)
A method on kc was called unconditionally, even if was not initialized,
leading to a nil pointer dereference when TS_SERVE_CONFIG was set
outside Kubernetes.
Add a guard symmetric with other uses of the kubeClient.
Signed-off-by: Bjorn Neergaard <bjorn@neersighted.com>
(cherry picked from commit 8b1d01161bbca8a26c2a50208444087c9fa2b3f1)
* cmd/containerboot: don't attempt to write kube Secret in non-kube environments (#14358)
Signed-off-by: Irbe Krumina <irbe@tailscale.com>
(cherry picked from commit 0cc071f15409071f2649c3e142eceaf7cabff560)
* cmd/containerboot: don't attempt to patch a Secret field without permissions (#14365)
Signed-off-by: Irbe Krumina <irbe@tailscale.com>
(cherry picked from commit 6e552f66a0289f6309477fb024019b62a251da16)
Updates tailscale/tailscale#14354
6e0f168db0