mirror of https://github.com/tailscale/tailscale.git synced 2026-02-19 15:15:31 -05:00

Files

David Bond a341eea00b k8s-operator,cmd/k8s-operator: define ProxyGroupPolicy CRD (#18614 )

This commit adds a new custom resource definition to the kubernetes
operator named `ProxyGroupPolicy`. This resource is namespace scoped
and is used as an allow list for which `ProxyGroup` resources can be
used within its namespace.

The `spec` contains two fields, `ingress` and `egress`. These should
contain the names of `ProxyGroup` resources to denote which can be
used as values in the `tailscale.com/proxy-group` annotation within
`Service` and `Ingress` resources.

The intention is for these policies to be merged within a namespace and
produce a `ValidatingAdmissionPolicy` and `ValidatingAdmissionPolicyBinding`
for both ingress and egress that prevents users from using names of
`ProxyGroup` resources in those annotations.

Closes: https://github.com/tailscale/corp/issues/36829

Signed-off-by: David Bond <davidsbond93@gmail.com>

2026-02-13 16:04:34 +00:00

chart

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

crds

k8s-operator,cmd/k8s-operator: define ProxyGroupPolicy CRD (#18614 )

2026-02-13 16:04:34 +00:00

examples

cmd/k8s-operator: update connector example (#17020 )

2025-09-03 22:08:45 +01:00

manifests

cmd/k8s-operator,k8s-operator:ensure that recorder replicas default to 1 (#18375 )

2026-02-03 14:12:38 +00:00

README.md

cmd/k8s-operator: generate static kube manifests from the Helm chart. (#10436 )

2023-12-04 10:18:07 +00:00

README.md

Tailscale Kubernetes operator deployment manifests

./cmd/k8s-operator/deploy contain various Tailscale Kubernetes operator deployment manifests.

Helm chart

./cmd/k8s-operator/deploy/chart contains Tailscale operator Helm chart templates. The chart templates are also used to generate the static manifest, so developers must ensure that any changes applied to the chart have been propagated to the static manifest by running go generate tailscale.com/cmd/k8s-operator

Static manifests

./cmd/k8s-operator/deploy/manifests/operator.yaml is a static manifest for the operator generated from the Helm chart templates for the operator.