You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tom Proctor 01a7726cf7 cmd/containerboot,cmd/k8s-operator: enable IPv6 for fqdn egress proxies (#12577) ... cmd/containerboot,cmd/k8s-operator: enable IPv6 for fqdn egress proxies Don't skip installing egress forwarding rules for IPv6 (as long as the host supports IPv6), and set headless services `ipFamilyPolicy` to `PreferDualStack` to optionally enable both IP families when possible. Note that even with `PreferDualStack` set, testing a dual-stack GKE cluster with the default DNS setup of kube-dns did not correctly set both A and AAAA records for the headless service, and instead only did so when switching the cluster DNS to Cloud DNS. For both IPv4 and IPv6 to work simultaneously in a dual-stack cluster, we require headless services to return both A and AAAA records. If the host doesn't support IPv6 but the FQDN specified only has IPv6 addresses available, containerboot will exit with error code 1 and an error message because there is no viable egress route. Fixes #12215 Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>		2 years ago
..
addlicense	all: update tools that manage copyright headers	3 years ago
build-webclient	client/web: precompress assets	2 years ago
cloner	all: use Go 1.22 range-over-int	2 years ago
connector-gen	cmd/connector-gen: add helper tool for wide app connector configurations	2 years ago
containerboot	cmd/containerboot,cmd/k8s-operator: enable IPv6 for fqdn egress proxies (#12577)	2 years ago
derper	cmd/derper: clarify that derper and tailscaled need to be in sync	2 years ago
derpprobe	cmd/derpprobe: support 'local' derpmap to get derp map via LocalAPI	2 years ago
dist	release/dist/qnap: add qnap target builder	2 years ago
get-authkey	util/cmpx: delete now that we're using Go 1.22	2 years ago
gitops-pusher	cmd/gitops-pusher: only use OAuth creds if non-empty string	2 years ago
hello	cmd/hello: link to the Hello KB article (#11022)	2 years ago
k8s-nameserver	cmd/k8s-nameserver: fix AAAA record query response (#12412)	2 years ago
k8s-operator	cmd/containerboot,cmd/k8s-operator: enable IPv6 for fqdn egress proxies (#12577)	2 years ago
mkmanifest	cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS	3 years ago
mkpkg	go.mod: upgrade nfpm to v2 (#8786)	3 years ago
mkversion	version/mkversion: open-source version generation logic	3 years ago
nardump	all: update copyright and license headers	3 years ago
natc	cmd/natc: add --wg-port flag	2 years ago
netlogfmt	all: use Go 1.22 range-over-int	2 years ago
nginx-auth	tailcfg,all: add and use Node.IsTagged()	3 years ago
pgproxy	tsnet: split user facing and backend logging	2 years ago
printdep	cmd/printdep: print correct toolchain URL	3 years ago
proxy-to-grafana	cmd/proxy-to-grafana: add flag for alternative control server	2 years ago
sniproxy	all: use math/rand/v2 more	2 years ago
speedtest	all: update copyright and license headers	3 years ago
ssh-auth-none-demo	all: replace deprecated ioutil references	3 years ago
stunc	cmd/stunc: support user-specified port (#12469)	2 years ago
stund	types/lazy: add Peek method to SyncValue	2 years ago
stunstamp	cmd/stunstamp: fix handling of invalid DERP map resp (#12679)	2 years ago
sync-containers	all: adjust some build tags for plan9	3 years ago
tailscale	cmd/tailscale/cli: exit node filter should display all exit node options (#12699)	2 years ago
tailscaled	net/netns: add Windows support for bind-to-interface-by-route	2 years ago
testcontrol	all: use Go 1.22 range-over-int	2 years ago
testwrapper	cmd/testwrapper: apply results of all unit tests to coverage for all packages	2 years ago
tsconnect	all: use math/rand/v2 more	2 years ago
tsidp	tsnet: split user facing and backend logging	2 years ago
tsshd	all: update copyright and license headers	3 years ago
viewer	cmd/viewer,type/views: add MapSlice for maps of slices	2 years ago
xdpderper	cmd/xdpderper: add autodetection for default interface name	2 years ago