You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Irbe Krumina
6b97e615d6
cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services ( #15897 ) ...
cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services
This PR is part of the work to implement HA for Kubernetes Operator's
network layer proxy.
Adds logic to containerboot to monitor mounted ingress firewall configuration rules
and update iptables/nftables rules as the config changes.
Also adds new shared types for the ingress configuration.
The implementation is intentionally similar to that for HA for egress proxy.
Updates tailscale/tailscale#15895
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: Irbe Krumina <irbe@tailscale.com>
11 months ago
..
certs.go
cmd/{k8s-operator,containerboot}: check TLS cert before advertising VIPService ( #15427 )
1 year ago
certs_test.go
cmd/containerboot: manage HA Ingress TLS certs from containerboot ( #15303 )
1 year ago
egressservices.go
cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services ( #15897 )
11 months ago
egressservices_test.go
cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services ( #15897 )
11 months ago
forwarding.go
cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, clean up if needed ( #13658 )
2 years ago
healthz.go
cmd/{containerboot,k8s-operator},kube/kubetypes: unadvertise ingress services on shutdown ( #15451 )
1 year ago
ingressservices.go
cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services ( #15897 )
11 months ago
ingressservices_test.go
cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services ( #15897 )
11 months ago
kube.go
cmd/containerboot: wait for consistent state on shutdown ( #14263 )
1 year ago
kube_test.go
cmd/containerboot: wait for consistent state on shutdown ( #14263 )
1 year ago
main.go
cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services ( #15897 )
11 months ago
main_test.go
cmd/containerboot: speed up tests ( #14883 )
1 year ago
metrics.go
cmd/{containerboot,k8s-operator},kube/kubetypes: unadvertise ingress services on shutdown ( #15451 )
1 year ago
serve.go
cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services ( #15897 )
11 months ago
serve_test.go
cmd/containerboot: manage HA Ingress TLS certs from containerboot ( #15303 )
1 year ago
services.go
cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services ( #15897 )
11 months ago
settings.go
cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services ( #15897 )
11 months ago
tailscaled.go
cmd/containerboot: speed up tests ( #14883 )
1 year ago
test_tailscale.sh
cmd/containerboot: make a tests table, add more tests.
3 years ago
test_tailscaled.sh
cmd/containerboot: avoid leaking bash scripts after test runs
3 years ago
Irbe Krumina
6b97e615d6