You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

David Bond eb3d35c8b5 cmd/k8s-operator,k8s-operator: define ProxyGroupPolicy reconciler (#18654) ... This commit implements a reconciler for the new `ProxyGroupPolicy` custom resource. When created, all `ProxyGroupPolicy` resources within the same namespace are merged into two `ValidatingAdmissionPolicy` resources, one for egress and one for ingress. These policies use CEL expressions to limit the usage of the "tailscale.com/proxy-group" annotation on `Service` and `Ingress` resources on create & update. Included here is also a new e2e test that ensures that resources that violate the policy return an error on creation, and that once the policy is changed to allow them they can be created. Closes: https://github.com/tailscale/corp/issues/36830 Signed-off-by: David Bond <davidsbond93@gmail.com>		2 months ago
..
nameserver	cmd/{k8s-operator,k8s-nameserver},k8s-operator: update nameserver config with records for ingress/egress proxies (#11019)	2 years ago
templates	all: remove AUTHORS file and references to it	3 months ago
authproxy-rbac.yaml	all: remove AUTHORS file and references to it	3 months ago
operator.yaml	cmd/k8s-operator,k8s-operator: define ProxyGroupPolicy reconciler (#18654)	2 months ago
proxy.yaml	cmd/k8s-operator: fix statefulset template yaml indentation (#18194)	4 months ago
userspace-proxy.yaml	cmd/k8s-operator: fix statefulset template yaml indentation (#18194)	4 months ago