You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

David Bond a341eea00b k8s-operator,cmd/k8s-operator: define ProxyGroupPolicy CRD (#18614) ... This commit adds a new custom resource definition to the kubernetes operator named `ProxyGroupPolicy`. This resource is namespace scoped and is used as an allow list for which `ProxyGroup` resources can be used within its namespace. The `spec` contains two fields, `ingress` and `egress`. These should contain the names of `ProxyGroup` resources to denote which can be used as values in the `tailscale.com/proxy-group` annotation within `Service` and `Ingress` resources. The intention is for these policies to be merged within a namespace and produce a `ValidatingAdmissionPolicy` and `ValidatingAdmissionPolicyBinding` for both ingress and egress that prevents users from using names of `ProxyGroup` resources in those annotations. Closes: https://github.com/tailscale/corp/issues/36829 Signed-off-by: David Bond <davidsbond93@gmail.com>		2 months ago
..
api-proxy	all: remove AUTHORS file and references to it	3 months ago
apis	k8s-operator,cmd/k8s-operator: define ProxyGroupPolicy CRD (#18614)	2 months ago
reconciler	all: remove AUTHORS file and references to it	3 months ago
sessionrecording	all: remove AUTHORS file and references to it	3 months ago
api-docs-config.yaml	all: remove AUTHORS file and references to it	3 months ago
api.md	k8s-operator,cmd/k8s-operator: define ProxyGroupPolicy CRD (#18614)	2 months ago
conditions.go	all: remove AUTHORS file and references to it	3 months ago
conditions_test.go	all: remove AUTHORS file and references to it	3 months ago
utils.go	all: remove AUTHORS file and references to it	3 months ago