You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Irbe Krumina c62b0732d2 cmd/k8s-operator: remove auth key once proxy has logged in (#13612) ... The operator creates a non-reusable auth key for each of the cluster proxies that it creates and puts in the tailscaled configfile mounted to the proxies. The proxies are always tagged, and their state is persisted in a Kubernetes Secret, so their node keys are expected to never be regenerated, so that they don't need to re-auth. Some tailnet configurations however have seen issues where the auth keys being left in the tailscaled configfile cause the proxies to end up in unauthorized state after a restart at a later point in time. Currently, we have not found a way to reproduce this issue, however this commit removes the auth key from the config once the proxy can be assumed to have logged in. If an existing, logged-in proxy is upgraded to this version, its redundant auth key will be removed from the conffile. If an existing, logged-in proxy is downgraded from this version to a previous version, it will work as before without re-issuing key as the previous code did not enforce that a key must be present. Updates tailscale/tailscale#13451 Signed-off-by: Irbe Krumina <irbe@tailscale.com>		2 years ago
..
addlicense	all: update tools that manage copyright headers	3 years ago
build-webclient	client/web: precompress assets	2 years ago
cloner	cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types	2 years ago
connector-gen	cmd/connector-gen: add helper tool for wide app connector configurations	2 years ago
containerboot	cmd/containerboot: split main.go (#13517)	2 years ago
derper	cli: add `tailscale dns query` (#13368)	2 years ago
derpprobe	cmd/derpprobe: use a status page from the prober library	2 years ago
dist	release/dist/qnap: add qnap target builder	2 years ago
get-authkey	util/cmpx: delete now that we're using Go 1.22	2 years ago
gitops-pusher	cmd/gitops-pusher: ignore previous etag if local acls match control (#13068)	2 years ago
hello	cmd/hello: link to the Hello KB article (#11022)	2 years ago
k8s-nameserver	cmd/k8s-nameserver: fix AAAA record query response (#12412)	2 years ago
k8s-operator	cmd/k8s-operator: remove auth key once proxy has logged in (#13612)	2 years ago
mkmanifest	cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS	3 years ago
mkpkg	go.mod: upgrade nfpm to v2 (#8786)	3 years ago
mkversion	version/mkversion: open-source version generation logic	3 years ago
nardump	all: update copyright and license headers	3 years ago
natc	cmd/natc: fix nil pointer	2 years ago
netlogfmt	all: use Go 1.22 range-over-int	2 years ago
nginx-auth	tailcfg,all: add and use Node.IsTagged()	3 years ago
pgproxy	tsnet: split user facing and backend logging	2 years ago
printdep	cmd/printdep: print correct toolchain URL	3 years ago
proxy-to-grafana	cmd/proxy-to-grafana: add flag for alternative control server	2 years ago
sniproxy	all: use math/rand/v2 more	2 years ago
speedtest	all: update copyright and license headers	3 years ago
ssh-auth-none-demo	all: replace deprecated ioutil references	3 years ago
stunc	cmd/stunc: support user-specified port (#12469)	2 years ago
stund	cli: add `tailscale dns query` (#13368)	2 years ago
stunstamp	cmd/stunstamp: add protocol context to timeout logs (#13422)	2 years ago
sync-containers	all: adjust some build tags for plan9	3 years ago
systray	cmd/systray: handle reconnects to IPN bus (#13386)	2 years ago
tailscale	cmd/tailscale: use tsaddr helpers	2 years ago
tailscaled	util/usermetrics: make usermetrics non-global	2 years ago
testcontrol	all: use Go 1.22 range-over-int	2 years ago
testwrapper	cmd/testwrapper: apply results of all unit tests to coverage for all packages	2 years ago
tl-longchain	cmd/tl-longchain: tool to re-sign nodes with long rotation signatures	2 years ago
tsconnect	all: use math/rand/v2 more	2 years ago
tsidp	cmd/tsidp: add funnel support (#12591)	2 years ago
tsshd	all: update copyright and license headers	3 years ago
tta	cmd/tta: pull out test driver dialing into a type, fix bugs	2 years ago
viewer	cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types	2 years ago
vnet	tstest/natlab/vnet: add start of IPv6 support	2 years ago
xdpderper	all: add test for package comments, fix, add comments as needed	2 years ago