summaryrefslogtreecommitdiffhomepage
path: root/cmd/containerboot/main.go
AgeCommit message (Expand)AuthorFilesLines
2024-11-12cmd/{k8s-operator,containerboot},k8s-operator: remove support for proxies bel...Irbe Krumina1-5/+4
2024-10-08cmd/{k8s-operator,containerboot},kube/egressservices: fix Pod IP check for du...Irbe Krumina1-30/+3
2024-10-07cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller...Tom Proctor1-1/+1
2024-10-03cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, cle...Irbe Krumina1-1/+5
2024-09-29cmd/containerboot,kube,util/linuxfw: configure kube egress proxies to route t...Irbe Krumina1-21/+45
2024-09-19cmd/containerboot: split main.go (#13517)Tom Proctor1-693/+0
2024-08-14cmd/containerboot: optionally serve health check endpoint (#12899)Irbe Krumina1-1/+63
2024-07-05cmd/containerboot,cmd/k8s-operator: enable IPv6 for fqdn egress proxies (#12577)Tom Proctor1-9/+11
2024-06-17cmd/{containerboot,k8s-operator}: store proxy device ID early to help with cl...Irbe Krumina1-12/+59
2024-06-10ipn/{ipnlocal,localapi},net/netkernelconf,client/tailscale,cmd/containerboot:...Irbe Krumina1-16/+32
2024-05-16cmd/containerboot: warn when an ingress proxy with an IPv4 tailnet address is...Irbe Krumina1-0/+7
2024-05-10cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter...Irbe Krumina1-4/+54
2024-04-29cmd/containerboot,kube,ipn/store/kubestore: allow interactive login on kube, ...Irbe Krumina1-32/+4
2024-04-27cmd/containerboot: wait on tailscaled process only (#11897)Irbe Krumina1-10/+11
2024-04-23cmd{containerboot,k8s-operator},util/linuxfw: support ExternalName Services (...Irbe Krumina1-21/+211
2024-02-08cmd/{containerboot,k8s-operator/deploy/manifests}: optionally allow proxying ...Irbe Krumina1-22/+92
2024-01-08cmd/containerboot: add EXPERIMENTAL_TS_CONFIGFILE_PATH env var to allow passi...Irbe Krumina1-55/+124
2024-01-04cmd/containerboot: don't parse empty subnet routes (#10738)Irbe Krumina1-1/+1
2024-01-04cmd/containerboot: ensure that subnet routes can be unset. (#10734)Irbe Krumina1-11/+32
2023-12-08cmd/containerboot: symlink TS_SOCKET to socket expected by CLIMaisem Ali1-0/+18
2023-12-05linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilterNaman Sood1-1/+1
2023-11-24cmd/{containerboot,k8s-operator}: allow users to define tailnet egress target...Irbe Krumina1-30/+91
2023-11-22containerboot: Add TS_ACCEPT_ROUTES (#10176)Claire Wang1-1/+1
2023-11-16cmd/containerboot: fix unclean shutdown (#10035)Irbe Krumina1-75/+124
2023-10-16cmd/containerboot: revert to using tailscale upMaisem Ali1-24/+30
2023-10-12cmd/containerboot: fix time based serveConfig watcherMaisem Ali1-6/+7
2023-10-11cmd/containerboot: use linuxfw.NetfilterRunnerMaisem Ali1-55/+36
2023-09-29cmd/containerboot: only wipeout serve config when TS_SERVE_CONFIG is setMaisem Ali1-4/+7
2023-09-29cmd/containerboot: set TS_AUTH_ONCE default to true.Denton Gentry1-4/+10
2023-09-20cmd/containerboot: add iptables based MSS clamping for ingress/egress proxiesMaisem Ali1-0/+13
2023-08-30cmd/k8s-operator,cmd/containerboot: add kube egress proxy (#9031)Irbe Krumina1-18/+95
2023-08-29cmd/containerboot: fix broken testsMaisem Ali1-2/+4
2023-08-28cmd/k8s-operator: put Tailscale IPs in Service ingress statusMike Beaumont1-1/+1
2023-08-25cmd/containerboot: account for k8s secret reflection in fsnotifyMaisem Ali1-7/+22
2023-08-24cmd/containerboot: add support for setting ServeConfigMaisem Ali1-14/+112
2023-08-24cmd/containerboot: reapply known args on restartMaisem Ali1-13/+36
2023-08-21types/netmap, all: make NetworkMap.SelfNode a tailcfg.NodeViewBrad Fitzpatrick1-2/+2
2023-03-02cmd/containerboot,kube: consolidate the two kube clientsMaisem Ali1-1/+1
2023-02-03ipn/ipnlocal: add support to store certs in k8s secretsMaisem Ali1-1/+5
2023-01-27all: update copyright and license headersWill Norris1-3/+2
2023-01-25cmd/k8s-operator: support setting a custom hostname.David Anderson1-0/+6
2023-01-05cmd/containerboot: use TS_AUTHKEY as the parameter for auth keysDavid Anderson1-3/+12
2022-12-16cmd/containerboot: allow disabling secret storage in k8s.David Anderson1-10/+14
2022-12-07cmd/containerboot: switch to IPN bus monitoring instead of polling.David Anderson1-84/+142
2022-12-07cmd/containerboot: gracefully degrade if missing patch permissions in k8s.David Anderson1-17/+31
2022-12-06cmd/containerboot: check that k8s secret permissions are correct.David Anderson1-9/+14
2022-12-06cmd/containerboot: split tailscaled bringup and auth phases.David Anderson1-18/+26
2022-12-06cmd/containerboot: fix TS_STATE_DIR environment variableAnton Tolchanov1-1/+1
2022-11-16all: standardize on LocalAPIMaisem Ali1-24/+24
2022-11-10cmd/containerboot: make a tests table, add more tests.David Anderson1-30/+46