You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Tom Proctor
8d84720edb
cmd/k8s-operator: update ProxyGroup config Secrets instead of patch ( #15353 )
...
There was a flaky failure case where renaming a TLS hostname for an
ingress might leave the old hostname dangling in tailscaled config. This
happened when the proxygroup reconciler loop had an outdated resource
version of the config Secret in its cache after the
ingress-pg-reconciler loop had very recently written it to delete the
old hostname. As the proxygroup reconciler then did a patch, there was
no conflict and it reinstated the old hostname.
This commit updates the patch to an update operation so that if the
resource version is out of date it will fail with an optimistic lock
error. It also checks for equality to reduce the likelihood that we make
the update API call in the first place, because most of the time the
proxygroup reconciler is not even making an update to the Secret in the
case that the hostname has changed.
Updates tailscale/corp#24795
Change-Id: Ie23a97440063976c9a8475d24ab18253e1f89050
Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>
1 year ago
..
addlicense
all: fix golangci-lint errors
1 year ago
build-webclient
client/web: precompress assets
2 years ago
checkmetrics
cmd/checkmetrics: add command for checking metrics against kb
1 year ago
cloner
cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types
2 years ago
connector-gen
cmd/connector-gen: add helper tool for wide app connector configurations
2 years ago
containerboot
cmd/containerboot: manage HA Ingress TLS certs from containerboot ( #15303 )
1 year ago
derper
tsweb: split promvarz into an optional dependency
1 year ago
derpprobe
tsweb: split promvarz into an optional dependency
1 year ago
dist
release/dist/qnap: add qnap target builder
2 years ago
get-authkey
cmd,tsnet,internal/client: create internal shim to deprecated control plane API
1 year ago
gitops-pusher
cmd/gitops-pusher: log error details when unable to fetch ACL ETag
1 year ago
hello
cmd/hello: display native ipv4 ( #15191 )
1 year ago
k8s-nameserver
cmd/k8s-nameserver: fix AAAA record query response ( #12412 )
2 years ago
k8s-operator
cmd/k8s-operator: update ProxyGroup config Secrets instead of patch ( #15353 )
1 year ago
mkmanifest
cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS
3 years ago
mkpkg
go.mod: upgrade nfpm to v2 ( #8786 )
3 years ago
mkversion
version/mkversion: open-source version generation logic
3 years ago
nardump
all: update copyright and license headers
3 years ago
natc
cmd/natc: error and log when IP range is exhausted
1 year ago
netlogfmt
all: use Go 1.22 range-over-int
2 years ago
nginx-auth
tailcfg,all: add and use Node.IsTagged()
3 years ago
pgproxy
all: use new LocalAPI client package location
1 year ago
printdep
cmd/printdep: print correct toolchain URL
3 years ago
proxy-to-grafana
cmd/proxy-to-grafana: support setting Grafana role via grants
1 year ago
sniproxy
all: use new LocalAPI client package location
1 year ago
speedtest
all: update copyright and license headers
3 years ago
ssh-auth-none-demo
ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh
1 year ago
stunc
cmd/stunc: enforce read timeout deadline ( #14309 )
1 year ago
stund
tsweb: split promvarz into an optional dependency
1 year ago
stunstamp
cmd/stunstamp: add protocol context to timeout logs ( #13422 )
2 years ago
sync-containers
all: adjust some build tags for plan9
3 years ago
systray
cmd/systray: add cmd/systray back as a small client/systray wrapper
1 year ago
tailscale
tsweb: split promvarz into an optional dependency
1 year ago
tailscaled
tsweb: split promvarz into an optional dependency
1 year ago
testcontrol
all: use Go 1.22 range-over-int
2 years ago
testwrapper
cmd/testwrapper: print failed tests preventing retry ( #15270 )
1 year ago
tl-longchain
all: use new LocalAPI client package location
1 year ago
tsconnect
go.toolchain.branch: update to Go 1.24 ( #15016 )
1 year ago
tsidp
cmd/tsidp: allow CORS requests to openid-configuration ( #15229 )
1 year ago
tsshd
all: update copyright and license headers
3 years ago
tta
all: use new LocalAPI client package location
1 year ago
viewer
cmd/viewer,all: consistently use "read-only" instead of "readonly"
1 year ago
vnet
tstest/natlab/vnet: add start of IPv6 support
2 years ago
xdpderper
tsweb: split promvarz into an optional dependency
1 year ago