cmd/k8s-operator: add support for Ingress resources

Previously, the operator would only monitor Services and create
a Tailscale StatefulSet which acted as a L3 proxy which proxied
traffic inbound to the Tailscale IP onto the services ClusterIP.

This extends that functionality to also monitor Ingress resources
where the `ingressClassName=tailscale` and similarly creates a
Tailscale StatefulSet, acting as a L7 proxy instead.

Users can override the desired hostname by setting:

```
- tls
  hosts:
  - "foo"
```

Hostnames specified under `rules` are ignored as we only create a single
host. This is emitted as an event for users to see.

Fixes #7895

Signed-off-by: Maisem Ali <maisem@tailscale.com>

This commit is contained in:

Maisem Ali

2023-08-24 15:18:17 -04:00

committed by

Maisem Ali

parent 320f77bd24

commit c8dea67cbf

8 changed files with 383 additions and 55 deletions

									
										cmd/k8s-operator/manifests/proxy.yaml
									
		+1
		-1
	
												View File
												
				@@ -2,7 +2,7 @@

				# at build time and then uses to construct Tailscale proxy pods.

				apiVersion: apps/v1

				kind: StatefulSet

				metadata:

				metadata: {}

				spec:

				  replicas: 1

				  template: