type Store struct {// contains filtered or unexported fields}

funcNew¶

func New(logflogger.Logf, secretNamestring) (*Store,error)

New returns a new Store that persists state to Kubernets Secret(s).Tailscale state is stored in a Secret named by the secretName parameter.TLS certs are stored and retrieved from state Secret or separate Secretsnamed after TLS endpoints if running in cert share mode.

func (*Store)ReadState¶

func (s *Store) ReadState(idipn.StateKey) ([]byte,error)

ReadState implements the StateStore interface.

func (*Store)ReadTLSCertAndKey¶added inv1.82.0

func (s *Store) ReadTLSCertAndKey(domainstring) (cert, key []byte, errerror)

ReadTLSCertAndKey reads a TLS cert and key from memory or from adomain-specific Secret. It first checks the in-memory store, if not found inmemory and running cert store in read-only mode, looks up a Secret.Note that write replicas of HA Ingress always retrieve TLS certs from Secrets.

func (*Store)SetDialer¶added inv1.40.0

func (s *Store) SetDialer(d func(ctxcontext.Context, network, addressstring) (net.Conn,error))

func (*Store)String¶

func (s *Store) String()string

func (*Store)WriteState¶

func (s *Store) WriteState(idipn.StateKey, bs []byte) (errerror)

WriteState implements the StateStore interface.

func (*Store)WriteTLSCertAndKey¶added inv1.82.0

func (s *Store) WriteTLSCertAndKey(domainstring, cert, key []byte) (errerror)

WriteTLSCertAndKey writes a TLS cert and key to domain.crt, domain.key fieldsof a Tailscale Kubernetes node's state Secret.