joshrzemien c2f3230c80 k8s-operator: allow annotationless resources under proxy group policy (#20907) ...

Guard optional annotations maps in generated CEL expressions before
looking up expose or proxy-group annotations. This lets ordinary
annotationless Services and Ingresses pass admission while preserving
deny-all and allowlist behavior for present proxy-group annotations.

RELNOTE: Kubernetes ProxyGroupPolicy now permits annotationless resources.

Fixes #20906

Change-Id: I8b9475d34c003ca6d233246c021ac656e0530fb1

Signed-off-by: joshrzemien <joshua.k.rzemien@gmail.com>

2026-08-20 12:27:18 +01:00

..

addlicense

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

build-webclient

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

checkmetrics

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

cigocacher

cmd/cigocacher: make token optional for --stats (#20896)

2026-08-17 14:23:17 +01:00

cloner

cmd: apply go fix

2026-07-10 14:26:11 -07:00

connector-gen

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

containerboot

cmd/containerboot: make the boot map-response timeout configurable

2026-08-19 12:21:52 +01:00

derper

client,feature/favorites: add locally-pinned favorites (#20563)

2026-08-19 09:52:56 -04:00

derpprobe

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

dist

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

distsign

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

fbstatus

cmd/tailscale: add 'configure pve-appliance' to make Proxmox VM of appliance

2026-07-07 13:12:13 -07:00

featuretags

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

get-authkey

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

gitops-pusher

go.mod: bump staticcheck in prep for Go 1.27, address fallout

2026-07-31 08:00:40 -07:00

hello

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

jsonimports

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

k8s-nameserver

all: don't repeat the the word "the" unnecessarily

2026-06-18 16:32:08 +01:00

k8s-operator

k8s-operator: allow annotationless resources under proxy group policy (#20907)

2026-08-20 12:27:18 +01:00

k8s-proxy

go.mod: bump staticcheck in prep for Go 1.27, address fallout

2026-07-31 08:00:40 -07:00

mkmanifest

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

mkpkg

all: use Go 1.26 things, run most gofix modernizers

2026-03-06 13:32:03 -08:00

mkversion

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

nardump

tool/updateflakes, cmd/nardump: replace update-flake.sh with Go tool

2026-04-28 10:18:32 -07:00

natc

staticcheck.conf: enable ST1000 to check package docs (#20787)

2026-08-08 13:02:06 -07:00

netlogfmt

cmd/tailscale/cli: fix time in tailscale routecheck (#19956)

2026-06-01 16:12:08 -07:00

nginx-auth

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

omitsize

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

pgproxy

cmd/pgproxy: fix client TLS handshake timeout

2026-05-11 11:12:11 -07:00

printdep

cmd/printdep: add --next flag to use rc Go build hash instead

2026-01-27 14:49:56 -08:00

proxy-test-server

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

proxy-to-grafana

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

sniproxy

all: migrate code off Notify.NetMap to Notify.SelfChange

2026-05-01 06:51:40 -07:00

speedtest

all: use Go 1.26 things, run most gofix modernizers

2026-03-06 13:32:03 -08:00

ssh-auth-none-demo

cmd/ssh-auth-none-demo: update SSH demo a bit

2026-06-03 19:36:19 -07:00

stunc

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

stund

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

stunstamp

tailcfg: replace int with DERPRegionID for additional type safety (#20646)

2026-08-19 16:25:50 -07:00

sync-containers

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

systray

client/systray: support several different color themes

2026-04-27 18:54:14 -07:00

tailscale

client,feature/favorites: add locally-pinned favorites (#20563)

2026-08-19 09:52:56 -04:00

tailscaled

client,feature/favorites: add locally-pinned favorites (#20563)

2026-08-19 09:52:56 -04:00

testcontrol

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

testwrapper

cmd/testwrapper: add Windows integration results panel + Slack notification (#20811)

2026-08-19 12:55:12 -07:00

tl-longchain

all: rename NetworkLock functions/types to TailnetLock

2026-06-08 13:14:28 +01:00

tsconnect

cmd/tsconnect/wasm: don't return non-nil net.Conn interface on dial error

2026-07-19 06:48:06 -07:00

tsidp

client,feature/favorites: add locally-pinned favorites (#20563)

2026-08-19 09:52:56 -04:00

tsnet-proxy

cmd/tsnet-proxy: add tsnet-based port proxy tool (#19468)

2026-04-22 13:34:18 -04:00

tsp

cmd: apply go fix

2026-07-10 14:26:11 -07:00

tsshd

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

tta

tstest, cmd/tta: add Tailscale SSH end-to-end VM test

2026-07-13 15:04:51 -07:00

vet

types/jsonformat: add wrapper types for JSON custom formats

2026-08-08 13:38:20 +01:00

viewer

cmd: apply go fix

2026-07-10 14:26:11 -07:00

vnet

gokrazy, tstest, cmd/vnet: switch amd64 kernel to gokrazy/kernel.amd64

2026-07-15 11:45:02 -04:00

xdpderper

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00