You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tom Proctor 3eeecb4c7f cmd/k8s-proxy,k8s-operator: fix serve config for userspace mode (#16919) ... The serve code leaves it up to the system's DNS resolver and netstack to figure out how to reach the proxy destination. Combined with k8s-proxy running in userspace mode, this means we can't rely on MagicDNS being available or tailnet IPs being routable. I'd like to implement that as a feature for serve in userspace mode, but for now the safer fix to get kube-apiserver ProxyGroups consistently working in all environments is to switch to using localhost as the proxy target instead. This has a small knock-on in the code that does WhoIs lookups, which now needs to check the X-Forwarded-For header that serve populates to get the correct tailnet IP to look up, because the request's remote address will be loopback. Fixes #16920 Change-Id: I869ddcaf93102da50e66071bb00114cc1acc1288 Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>		8 months ago
..
internal/config	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	9 months ago
k8s-proxy.go	cmd/k8s-proxy,k8s-operator: fix serve config for userspace mode (#16919)	8 months ago