summaryrefslogtreecommitdiffhomepage
path: root/cmd/containerboot
AgeCommit message (Expand)AuthorFilesLines
2025-02-05all: use new LocalAPI client package locationBrad Fitzpatrick5-15/+15
2025-01-30cmd/containerboot: wait for consistent state on shutdown (#14263)Tom Proctor5-75/+294
2025-01-29cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't...Irbe Krumina6-73/+484
2025-01-21cmd/{k8s-operator,containerboot},kube/kubetypes: parse Ingresses for ingress ...Irbe Krumina1-0/+7
2025-01-10cmd/containerboot: load containerboot serve config that does not contain HTTP...Irbe Krumina2-11/+290
2025-01-10cmd/containerboot,cmd/k8s-operator: reload tailscaled config (#14342)Irbe Krumina2-0/+78
2024-12-11cmd/containerboot: don't attempt to patch a Secret field without permissions ...Irbe Krumina3-1/+3
2024-12-11cmd/containerboot: add more tests, check that egress service config only set ...Irbe Krumina2-8/+119
2024-12-11cmd/containerboot: don't attempt to write kube Secret in non-kube environment...Irbe Krumina1-2/+4
2024-12-11cmd/containerboot: guard kubeClient against nil dereference (#14357)Bjorn Neergaard1-2/+4
2024-12-04cmd/{containerboot,k8s-operator},kube/kubetypes: kube Ingress L7 proxies only...Irbe Krumina6-89/+194
2024-12-02cmd/containerboot: serve health on local endpoint (#14246)Tom Proctor5-63/+248
2024-11-23cmd/containerboot: preserve headers of metrics endpoints responses (#14204)Irbe Krumina1-1/+1
2024-11-22cmd/{containerboot,k8s-operator},k8s-operator: new options to expose user met...Tom Proctor5-2/+127
2024-11-19kube/{kubeapi,kubeclient},ipn/store/kubestore,cmd/{containerboot,k8s-operator...Irbe Krumina2-3/+3
2024-11-12cmd/{k8s-operator,containerboot},k8s-operator: remove support for proxies bel...Irbe Krumina1-5/+4
2024-10-08cmd/{k8s-operator,containerboot},kube/egressservices: fix Pod IP check for du...Irbe Krumina3-35/+65
2024-10-08cmd/containerboot: simplify k8s setup logic (#13627)Tom Proctor1-29/+36
2024-10-07cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller...Tom Proctor1-1/+1
2024-10-04cmd/{k8s-operator,containerboot},k8s-operator,kube: reconcile ExternalName Se...Irbe Krumina1-12/+14
2024-10-03cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, cle...Irbe Krumina3-4/+7
2024-09-29cmd/containerboot,kube,util/linuxfw: configure kube egress proxies to route t...Irbe Krumina4-22/+792
2024-09-19cmd/containerboot: split main.go (#13517)Tom Proctor7-744/+830
2024-09-08kube,cmd/{k8s-operator,containerboot},envknob,ipn/store/kubestore,*/depaware....Irbe Krumina2-4/+4
2024-09-08kube,cmd/{k8s-operator,containerboot},envknob,ipn/store/kubestore,*/depaware....Irbe Krumina2-36/+38
2024-08-14cmd/containerboot: optionally serve health check endpoint (#12899)Irbe Krumina1-1/+63
2024-07-05cmd/containerboot,cmd/k8s-operator: enable IPv6 for fqdn egress proxies (#12577)Tom Proctor2-10/+79
2024-06-17cmd/{containerboot,k8s-operator}: store proxy device ID early to help with cl...Irbe Krumina2-29/+73
2024-06-10ipn/{ipnlocal,localapi},net/netkernelconf,client/tailscale,cmd/containerboot:...Irbe Krumina1-16/+32
2024-05-31ipn/store/kubestore, cmd/containerboot: allow overriding client api server UR...ChandonPierre1-3/+3
2024-05-16cmd/containerboot: warn when an ingress proxy with an IPv4 tailnet address is...Irbe Krumina1-0/+7
2024-05-10cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter...Irbe Krumina2-9/+59
2024-04-29cmd/containerboot,kube,ipn/store/kubestore: allow interactive login on kube, ...Irbe Krumina3-48/+263
2024-04-27cmd/containerboot: wait on tailscaled process only (#11897)Irbe Krumina1-10/+11
2024-04-23cmd{containerboot,k8s-operator},util/linuxfw: support ExternalName Services (...Irbe Krumina1-21/+211
2024-02-08cmd/{containerboot,k8s-operator/deploy/manifests}: optionally allow proxying ...Irbe Krumina1-22/+92
2024-01-08cmd/containerboot: add EXPERIMENTAL_TS_CONFIGFILE_PATH env var to allow passi...Irbe Krumina2-56/+148
2024-01-04cmd/containerboot: don't parse empty subnet routes (#10738)Irbe Krumina1-1/+1
2024-01-04cmd/containerboot: ensure that subnet routes can be unset. (#10734)Irbe Krumina2-11/+54
2023-12-08cmd/containerboot: symlink TS_SOCKET to socket expected by CLIMaisem Ali1-0/+18
2023-12-05linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilterNaman Sood1-1/+1
2023-12-05all: fix nilness issuesMatt Layher1-3/+0
2023-11-24cmd/{containerboot,k8s-operator}: allow users to define tailnet egress target...Irbe Krumina1-30/+91
2023-11-22containerboot: Add TS_ACCEPT_ROUTES (#10176)Claire Wang2-1/+17
2023-11-16cmd/containerboot: fix unclean shutdown (#10035)Irbe Krumina1-75/+124
2023-10-16cmd/containerboot: revert to using tailscale upMaisem Ali2-130/+60
2023-10-12cmd/containerboot: fix time based serveConfig watcherMaisem Ali1-6/+7
2023-10-11cmd/containerboot: use linuxfw.NetfilterRunnerMaisem Ali2-60/+37
2023-09-29cmd/containerboot: only wipeout serve config when TS_SERVE_CONFIG is setMaisem Ali1-4/+7
2023-09-29cmd/containerboot: set TS_AUTH_ONCE default to true.Denton Gentry2-10/+36