Files
tailscale/cmd/containerboot
Santhi Prakash f851ca27e4 cmd/containerboot: keep egress proxy watch alive after failed FQDN resolve (#22108)
In singleton egress mode (TS_TAILNET_TARGET_FQDN), a failed resolution
of the target FQDN logged the error but then broke out of the main
runLoop instead of continuing to the next netmap update. From then on
containerboot blocked in wg.Wait() while the pod still looked healthy,
and the egress proxy kept forwarding to stale addresses until restart.

A missing target is typically transient (peer not yet in the netmap,
ACL change in flight), so log and continue to let the next netmap
update retry the resolution and reinstall the forwarding rules.

Fixes #22102

Signed-off-by: Santhi Prakash <b.santhiprakash@gmail.com>
2026-11-04 10:21:20 +00:00
..