joshrzemien c2f3230c80 k8s-operator: allow annotationless resources under proxy group policy (#20907) ...

Guard optional annotations maps in generated CEL expressions before
looking up expose or proxy-group annotations. This lets ordinary
annotationless Services and Ingresses pass admission while preserving
deny-all and allowlist behavior for present proxy-group annotations.

RELNOTE: Kubernetes ProxyGroupPolicy now permits annotationless resources.

Fixes #20906

Change-Id: I8b9475d34c003ca6d233246c021ac656e0530fb1

Signed-off-by: joshrzemien <joshua.k.rzemien@gmail.com>

2026-08-20 12:27:18 +01:00

..

api-proxy

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

apis

k8s-operator: make PeerRelay endpoints reachable on EKS by default (#20834)

2026-08-12 15:31:16 +01:00

reconciler

k8s-operator: allow annotationless resources under proxy group policy (#20907)

2026-08-20 12:27:18 +01:00

sessionrecording

staticcheck.conf: enable ST1000 to check package docs (#20787)

2026-08-08 13:02:06 -07:00

tsclient

cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010)

2026-04-09 14:39:46 +01:00

api-docs-config.yaml

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

api.md

k8s-operator: make PeerRelay endpoints reachable on EKS by default (#20834)

2026-08-12 15:31:16 +01:00

conditions_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

conditions.go

cmd/k8s-operator,k8s-operator: Kubernetes Peer Relays (#20495)

2026-07-20 16:37:15 +01:00

utils_test.go

all: apply go fix

2026-07-10 17:39:16 -07:00

utils.go

cmd/{containerboot,k8s-operator}: add 4via6 support in singleton egress (#19983)

2026-06-18 16:13:10 +01:00