diff options
| author | Irbe Krumina <irbe@tailscale.com> | 2026-01-13 13:43:17 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-01-13 12:43:17 +0000 |
| commit | 8c17d871b33ade8ebf8e2a6c5e136f06c4019cd2 (patch) | |
| tree | b83ca5839324814ace22348773449fa0a5019e1c /control/controlhttp/controlhttpserver | |
| parent | 87e108e10c84f71341fb4edaaeb06e8e12fe682a (diff) | |
| download | tailscale-8c17d871b33ade8ebf8e2a6c5e136f06c4019cd2.tar.xz tailscale-8c17d871b33ade8ebf8e2a6c5e136f06c4019cd2.zip | |
ipn/store/kubestore: don't load write replica certs in memory (#18395)
Fixes a bug where, for kube HA proxies, TLS certs for the replica
responsible for cert issuance where loaded in memory on startup,
although the in-memory store was not updated after renewal (to
avoid failing re-issuance for re-created Ingresses).
Now the 'write' replica always reads certs from the kube Secret.
Updates tailscale/tailscale#18394
Signed-off-by: Irbe Krumina <irbekrm@gmail.com>
Diffstat (limited to 'control/controlhttp/controlhttpserver')
0 files changed, 0 insertions, 0 deletions