You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

David Bond eb3d35c8b5 cmd/k8s-operator,k8s-operator: define ProxyGroupPolicy reconciler (#18654) ... This commit implements a reconciler for the new `ProxyGroupPolicy` custom resource. When created, all `ProxyGroupPolicy` resources within the same namespace are merged into two `ValidatingAdmissionPolicy` resources, one for egress and one for ingress. These policies use CEL expressions to limit the usage of the "tailscale.com/proxy-group" annotation on `Service` and `Ingress` resources on create & update. Included here is also a new e2e test that ensures that resources that violate the policy return an error on creation, and that once the policy is changed to allow them they can be created. Closes: https://github.com/tailscale/corp/issues/36830 Signed-off-by: David Bond <davidsbond93@gmail.com>		2 months ago
..
doc.go	all: remove AUTHORS file and references to it	3 months ago
register.go	k8s-operator,cmd/k8s-operator: define ProxyGroupPolicy CRD (#18614)	2 months ago
types_connector.go	all: remove AUTHORS file and references to it	3 months ago
types_proxyclass.go	all: remove AUTHORS file and references to it	3 months ago
types_proxygroup.go	all: remove AUTHORS file and references to it	3 months ago
types_proxygrouppolicy.go	cmd/k8s-operator,k8s-operator: define ProxyGroupPolicy reconciler (#18654)	2 months ago
types_recorder.go	cmd/k8s-operator,k8s-operator:ensure that recorder replicas default to 1 (#18375)	2 months ago
types_tailnet.go	all: remove AUTHORS file and references to it	3 months ago
types_tsdnsconfig.go	all: remove AUTHORS file and references to it	3 months ago
zz_generated.deepcopy.go	k8s-operator,cmd/k8s-operator: define ProxyGroupPolicy CRD (#18614)	2 months ago