func Resource(resourcestring)schema.GroupResource

type APIServerProxyModestring

type AppConnector struct {// Routes are optional preconfigured routes for the domains routed via the app connector.// If not set, routes for the domains will be discovered dynamically.// If set, the app connector will immediately be able to route traffic using the preconfigured routes, but may// also dynamically discover other routes.//https://tailscale.com/kb/1332/apps-best-practices#preconfiguration// +optionalRoutesRoutes `json:"routes"`}

func (*AppConnector)DeepCopy¶added inv1.78.0

func (in *AppConnector) DeepCopy() *AppConnector

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AppConnector.

func (*AppConnector)DeepCopyInto¶added inv1.78.0

func (in *AppConnector) DeepCopyInto(out *AppConnector)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ConditionTypestring

const NameserverReadyConditionType = `NameserverReady`

NameserverReady is set to True if the nameserver has been successfullydeployed to cluster.

type Connector struct {metav1.TypeMeta   `json:",inline"`metav1.ObjectMeta `json:"metadata,omitempty"`// ConnectorSpec describes the desired Tailscale component.// More info://https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusSpecConnectorSpec `json:"spec"`// ConnectorStatus describes the status of the Connector. This is set// and managed by the Tailscale operator.// +optionalStatusConnectorStatus `json:"status"`}

func (*Connector)DeepCopy¶

func (in *Connector) DeepCopy() *Connector

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Connector.

func (*Connector)DeepCopyInto¶

func (in *Connector) DeepCopyInto(out *Connector)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Connector)DeepCopyObject¶

func (in *Connector) DeepCopyObject()runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ConnectorDevice struct {// Hostname is the fully qualified domain name of the Connector replica.// If MagicDNS is enabled in your tailnet, it is the MagicDNS name of the// node.// +optionalHostnamestring `json:"hostname"`// TailnetIPs is the set of tailnet IP addresses (both IPv4 and IPv6)// assigned to the Connector replica.// +optionalTailnetIPs []string `json:"tailnetIPs,omitempty"`}

func (*ConnectorDevice)DeepCopy¶added inv1.88.0

func (in *ConnectorDevice) DeepCopy() *ConnectorDevice

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ConnectorDevice.

func (*ConnectorDevice)DeepCopyInto¶added inv1.88.0

func (in *ConnectorDevice) DeepCopyInto(out *ConnectorDevice)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ConnectorList struct {metav1.TypeMeta `json:",inline"`metav1.ListMeta `json:"metadata"`Items []Connector `json:"items"`}

func (*ConnectorList)DeepCopy¶

func (in *ConnectorList) DeepCopy() *ConnectorList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ConnectorList.

func (*ConnectorList)DeepCopyInto¶

func (in *ConnectorList) DeepCopyInto(out *ConnectorList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ConnectorList)DeepCopyObject¶

func (in *ConnectorList) DeepCopyObject()runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ConnectorSpec struct {// Tags that the Tailscale node will be tagged with.// Defaults to [tag:k8s].// To autoapprove the subnet routes or exit node defined by a Connector,// you can configure Tailscale ACLs to give these tags the necessary// permissions.// Seehttps://tailscale.com/kb/1337/acl-syntax#autoapprovers.// If you specify custom tags here, you must also make the operator an owner of these tags.// Seehttps://tailscale.com/kb/1236/kubernetes-operator/#setting-up-the-kubernetes-operator.// Tags cannot be changed once a Connector node has been created.// Tag values must be in form ^tag:[a-zA-Z][a-zA-Z0-9-]*$.// +optionalTagsTags `json:"tags,omitempty"`// Hostname is the tailnet hostname that should be assigned to the// Connector node. If unset, hostname defaults to <connector// name>-connector. Hostname can contain lower case letters, numbers and// dashes, it must not start or end with a dash and must be between 2// and 63 characters long. This field should only be used when creating a connector// with an unspecified number of replicas, or a single replica.// +optionalHostnameHostname `json:"hostname,omitempty"`// HostnamePrefix specifies the hostname prefix for each// replica. Each device will have the integer number// from its StatefulSet pod appended to this prefix to form the full hostname.// HostnamePrefix can contain lower case letters, numbers and dashes, it// must not start with a dash and must be between 1 and 62 characters long.// +optionalHostnamePrefixHostnamePrefix `json:"hostnamePrefix,omitempty"`// ProxyClass is the name of the ProxyClass custom resource that// contains configuration options that should be applied to the// resources created for this Connector. If unset, the operator will// create resources with the default configuration.// +optionalProxyClassstring `json:"proxyClass,omitempty"`// SubnetRouter defines subnet routes that the Connector device should// expose to tailnet as a Tailscale subnet router.//https://tailscale.com/kb/1019/subnets/// If this field is unset, the device does not get configured as a Tailscale subnet router.// This field is mutually exclusive with the appConnector field.// +optionalSubnetRouter *SubnetRouter `json:"subnetRouter,omitempty"`// AppConnector defines whether the Connector device should act as a Tailscale app connector. A Connector that is// configured as an app connector cannot be a subnet router or an exit node. If this field is unset, the// Connector does not act as an app connector.// Note that you will need to manually configure the permissions and the domains for the app connector via the// Admin panel.// Note also that the main tested and supported use case of this config option is to deploy an app connector on// Kubernetes to access SaaS applications available on the public internet. Using the app connector to expose// cluster workloads or other internal workloads to tailnet might work, but this is not a use case that we have// tested or optimised for.// If you are using the app connector to access SaaS applications because you need a predictable egress IP that// can be whitelisted, it is also your responsibility to ensure that cluster traffic from the connector flows// via that predictable IP, for example by enforcing that cluster egress traffic is routed via an egress NAT// device with a static IP address.//https://tailscale.com/kb/1281/app-connectors// +optionalAppConnector *AppConnector `json:"appConnector,omitempty"`// ExitNode defines whether the Connector device should act as a Tailscale exit node. Defaults to false.// This field is mutually exclusive with the appConnector field.//https://tailscale.com/kb/1103/exit-nodes// +optionalExitNodebool `json:"exitNode"`// Replicas specifies how many devices to create. Set this to enable// high availability for app connectors, subnet routers, or exit nodes.//https://tailscale.com/kb/1115/high-availability. Defaults to 1.// +optional// +kubebuilder:validation:Minimum=0Replicas *int32 `json:"replicas,omitempty"`}

func (*ConnectorSpec)DeepCopy¶

func (in *ConnectorSpec) DeepCopy() *ConnectorSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ConnectorSpec.

func (*ConnectorSpec)DeepCopyInto¶

func (in *ConnectorSpec) DeepCopyInto(out *ConnectorSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ConnectorStatus struct {// List of status conditions to indicate the status of the Connector.// Known condition types are `ConnectorReady`.// +listType=map// +listMapKey=type// +optionalConditions []metav1.Condition `json:"conditions"`// SubnetRoutes are the routes currently exposed to tailnet via this// Connector instance.// +optionalSubnetRoutesstring `json:"subnetRoutes"`// IsExitNode is set to true if the Connector acts as an exit node.// +optionalIsExitNodebool `json:"isExitNode"`// IsAppConnector is set to true if the Connector acts as an app connector.// +optionalIsAppConnectorbool `json:"isAppConnector"`// TailnetIPs is the set of tailnet IP addresses (both IPv4 and IPv6)// assigned to the Connector node.// +optionalTailnetIPs []string `json:"tailnetIPs,omitempty"`// Hostname is the fully qualified domain name of the Connector node.// If MagicDNS is enabled in your tailnet, it is the MagicDNS name of the// node. When using multiple replicas, this field will be populated with the// first replica's hostname. Use the Hostnames field for the full list// of hostnames.// +optionalHostnamestring `json:"hostname,omitempty"`// Devices contains information on each device managed by the Connector resource.// +optionalDevices []ConnectorDevice `json:"devices"`}

func (*ConnectorStatus)DeepCopy¶

func (in *ConnectorStatus) DeepCopy() *ConnectorStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ConnectorStatus.

func (*ConnectorStatus)DeepCopyInto¶

func (in *ConnectorStatus) DeepCopyInto(out *ConnectorStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Container struct {// List of environment variables to set in the container.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#environment-variables// Note that environment variables provided here will take precedence// over Tailscale-specific environment variables set by the operator,// however running proxies with custom values for Tailscale environment// variables (i.e TS_USERSPACE) is not recommended and might break in// the future.// +optionalEnv []Env `json:"env,omitempty"`// Container image name. By default images are pulled from docker.io/tailscale,// but the official images are also available at ghcr.io/tailscale.//// For all uses except on ProxyGroups of type "kube-apiserver", this image must// be either tailscale/tailscale, or an equivalent mirror of that image.// To apply to ProxyGroups of type "kube-apiserver", this image must be// tailscale/k8s-proxy or a mirror of that image.//// For "tailscale/tailscale"-based proxies, specifying image name here will// override any proxy image values specified via the Kubernetes operator's// Helm chart values or PROXY_IMAGE env var in the operator Deployment.// For "tailscale/k8s-proxy"-based proxies, there is currently no way to// configure your own default, and this field is the only way to use a// custom image.////https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#image// +optionalImagestring `json:"image,omitempty"`// Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#image// +kubebuilder:validation:Enum=Always;Never;IfNotPresent// +optionalImagePullPolicycorev1.PullPolicy `json:"imagePullPolicy,omitempty"`// Container resource requirements.// By default Tailscale Kubernetes operator does not apply any resource// requirements. The amount of resources required wil depend on the// amount of resources the operator needs to parse, usage patterns and// cluster size.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#resources// +optionalResourcescorev1.ResourceRequirements `json:"resources,omitempty"`// Container security context.// Security context specified here will override the security context set by the operator.// By default the operator sets the Tailscale container and the Tailscale init container to privileged// for proxies created for Tailscale ingress and egress Service, Connector and ProxyGroup.// You can reduce the permissions of the Tailscale container to cap NET_ADMIN by// installing device plugin in your cluster and configuring the proxies tun device to be created// by the device plugin, seehttps://github.com/tailscale/tailscale/issues/10814#issuecomment-2479977752//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#security-context// +optionalSecurityContext *corev1.SecurityContext `json:"securityContext,omitempty"`// Configuration for enabling extra debug information in the container.// Not recommended for production use.// +optionalDebug *Debug `json:"debug,omitempty"`}

func (*Container)DeepCopy¶added inv1.60.0

func (in *Container) DeepCopy() *Container

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Container.

func (*Container)DeepCopyInto¶added inv1.60.0

func (in *Container) DeepCopyInto(out *Container)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DNSConfig struct {metav1.TypeMeta   `json:",inline"`metav1.ObjectMeta `json:"metadata,omitempty"`// Spec describes the desired DNS configuration.// More info://https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusSpecDNSConfigSpec `json:"spec"`// Status describes the status of the DNSConfig. This is set// and managed by the Tailscale operator.// +optionalStatusDNSConfigStatus `json:"status"`}

func (*DNSConfig)DeepCopy¶added inv1.66.0

func (in *DNSConfig) DeepCopy() *DNSConfig

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DNSConfig.

func (*DNSConfig)DeepCopyInto¶added inv1.66.0

func (in *DNSConfig) DeepCopyInto(out *DNSConfig)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DNSConfig)DeepCopyObject¶added inv1.66.0

func (in *DNSConfig) DeepCopyObject()runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DNSConfigList struct {metav1.TypeMeta `json:",inline"`metav1.ListMeta `json:"metadata"`Items []DNSConfig `json:"items"`}

func (*DNSConfigList)DeepCopy¶added inv1.66.0

func (in *DNSConfigList) DeepCopy() *DNSConfigList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DNSConfigList.

func (*DNSConfigList)DeepCopyInto¶added inv1.66.0

func (in *DNSConfigList) DeepCopyInto(out *DNSConfigList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*DNSConfigList)DeepCopyObject¶added inv1.66.0

func (in *DNSConfigList) DeepCopyObject()runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type DNSConfigSpec struct {// Configuration for a nameserver that can resolve ts.net DNS names// associated with in-cluster proxies for Tailscale egress Services and// Tailscale Ingresses. The operator will always deploy this nameserver// when a DNSConfig is applied.Nameserver *Nameserver `json:"nameserver"`}

func (*DNSConfigSpec)DeepCopy¶added inv1.66.0

func (in *DNSConfigSpec) DeepCopy() *DNSConfigSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DNSConfigSpec.

func (*DNSConfigSpec)DeepCopyInto¶added inv1.66.0

func (in *DNSConfigSpec) DeepCopyInto(out *DNSConfigSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DNSConfigStatus struct {// +listType=map// +listMapKey=type// +optionalConditions []metav1.Condition `json:"conditions"`// Nameserver describes the status of nameserver cluster resources.// +optionalNameserver *NameserverStatus `json:"nameserver"`}

func (*DNSConfigStatus)DeepCopy¶added inv1.66.0

func (in *DNSConfigStatus) DeepCopy() *DNSConfigStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DNSConfigStatus.

func (*DNSConfigStatus)DeepCopyInto¶added inv1.66.0

func (in *DNSConfigStatus) DeepCopyInto(out *DNSConfigStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Debug struct {// Enable tailscaled's HTTP pprof endpoints at <pod-ip>:9001/debug/pprof/// and internal debug metrics endpoint at <pod-ip>:9001/debug/metrics, where// 9001 is a container port named "debug". The endpoints and their responses// may change in backwards incompatible ways in the future, and should not// be considered stable.//// In 1.78.x and 1.80.x, this setting will default to the value of// .spec.metrics.enable, and requests to the "metrics" port matching the// mux pattern /debug/ will be forwarded to the "debug" port. In 1.82.x,// this setting will default to false, and no requests will be proxied.//// +optionalEnablebool `json:"enable"`}

func (*Debug)DeepCopy¶added inv1.78.0

func (in *Debug) DeepCopy() *Debug

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Debug.

func (*Debug)DeepCopyInto¶added inv1.78.0

func (in *Debug) DeepCopyInto(out *Debug)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Env struct {// Name of the environment variable. Must be a C_IDENTIFIER.NameName `json:"name"`// Variable references $(VAR_NAME) are expanded using the previously defined//  environment variables in the container and any service environment// variables. If a variable cannot be resolved, the reference in the input// string will be unchanged. Double $$ are reduced to a single $, which// allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will// produce the string literal "$(VAR_NAME)". Escaped references will never// be expanded, regardless of whether the variable exists or not. Defaults// to "".// +optionalValuestring `json:"value,omitempty"`}

func (*Env)DeepCopy¶added inv1.66.0

func (in *Env) DeepCopy() *Env

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Env.

func (*Env)DeepCopyInto¶added inv1.66.0

func (in *Env) DeepCopyInto(out *Env)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Hostnamestring

type HostnamePrefixstring

type KubeAPIServerConfig struct {// Mode to run the API server proxy in. Supported modes are auth and noauth.// In auth mode, requests from the tailnet proxied over to the Kubernetes// API server are additionally impersonated using the sender's tailnet identity.// If not specified, defaults to auth mode.// +optionalMode *APIServerProxyMode `json:"mode,omitempty"`// Hostname is the hostname with which to expose the Kubernetes API server// proxies. Must be a valid DNS label no longer than 63 characters. If not// specified, the name of the ProxyGroup is used as the hostname. Must be// unique across the whole tailnet.// +kubebuilder:validation:Type=string// +kubebuilder:validation:Pattern=`^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$`// +optionalHostnamestring `json:"hostname,omitempty"`}

func (*KubeAPIServerConfig)DeepCopy¶added inv1.86.0

func (in *KubeAPIServerConfig) DeepCopy() *KubeAPIServerConfig

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KubeAPIServerConfig.

func (*KubeAPIServerConfig)DeepCopyInto¶added inv1.86.0

func (in *KubeAPIServerConfig) DeepCopyInto(out *KubeAPIServerConfig)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LabelValuestring

type Labels map[string]LabelValue

func (Labels)DeepCopy¶added inv1.80.0

func (inLabels) DeepCopy()Labels

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Labels.

func (Labels)DeepCopyInto¶added inv1.80.0

func (inLabels) DeepCopyInto(out *Labels)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (Labels)Parse¶added inv1.80.0

func (lbLabels) Parse() map[string]string

type Metrics struct {// Setting enable to true will make the proxy serve Tailscale metrics// at <pod-ip>:9002/metrics.// A metrics Service named <proxy-statefulset>-metrics will also be created in the operator's namespace and will// serve the metrics at <service-ip>:9002/metrics.//// In 1.78.x and 1.80.x, this field also serves as the default value for// .spec.statefulSet.pod.tailscaleContainer.debug.enable. From 1.82.0, both// fields will independently default to false.//// Defaults to false.Enablebool `json:"enable"`// Enable to create a Prometheus ServiceMonitor for scraping the proxy's Tailscale metrics.// The ServiceMonitor will select the metrics Service that gets created when metrics are enabled.// The ingested metrics for each Service monitor will have labels to identify the proxy:// ts_proxy_type: ingress_service|ingress_resource|connector|proxygroup// ts_proxy_parent_name: name of the parent resource (i.e name of the Connector, Tailscale Ingress, Tailscale Service or ProxyGroup)// ts_proxy_parent_namespace: namespace of the parent resource (if the parent resource is not cluster scoped)// job: ts_<proxy type>_[<parent namespace>]_<parent_name>// +optionalServiceMonitor *ServiceMonitor `json:"serviceMonitor"`}

func (*Metrics)DeepCopy¶added inv1.66.0

func (in *Metrics) DeepCopy() *Metrics

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Metrics.

func (*Metrics)DeepCopyInto¶added inv1.66.0

func (in *Metrics) DeepCopyInto(out *Metrics)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Namestring

type Nameserver struct {// Nameserver image. Defaults to tailscale/k8s-nameserver:unstable.// +optionalImage *NameserverImage `json:"image,omitempty"`// Service configuration.// +optionalService *NameserverService `json:"service,omitempty"`// Pod configuration.// +optionalPod *NameserverPod `json:"pod,omitempty"`// Replicas specifies how many Pods to create. Defaults to 1.// +optional// +kubebuilder:validation:Minimum=0Replicas *int32 `json:"replicas,omitempty"`}

func (*Nameserver)DeepCopy¶added inv1.66.0

func (in *Nameserver) DeepCopy() *Nameserver

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Nameserver.

func (*Nameserver)DeepCopyInto¶added inv1.66.0

func (in *Nameserver) DeepCopyInto(out *Nameserver)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NameserverImage struct {// Repo defaults to tailscale/k8s-nameserver.// +optionalRepostring `json:"repo,omitempty"`// Tag defaults to unstable.// +optionalTagstring `json:"tag,omitempty"`}

func (*NameserverImage)DeepCopy¶added inv1.74.0

func (in *NameserverImage) DeepCopy() *NameserverImage

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NameserverImage.

func (*NameserverImage)DeepCopyInto¶added inv1.74.0

func (in *NameserverImage) DeepCopyInto(out *NameserverImage)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NameserverPod struct {// If specified, applies tolerations to the pods deployed by the DNSConfig resource.// +optionalTolerations []corev1.Toleration `json:"tolerations,omitempty"`}

func (*NameserverPod)DeepCopy¶added inv1.90.0

func (in *NameserverPod) DeepCopy() *NameserverPod

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NameserverPod.

func (*NameserverPod)DeepCopyInto¶added inv1.90.0

func (in *NameserverPod) DeepCopyInto(out *NameserverPod)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NameserverService struct {// ClusterIP sets the static IP of the service used by the nameserver.// +optionalClusterIPstring `json:"clusterIP,omitempty"`}

func (*NameserverService)DeepCopy¶added inv1.86.0

func (in *NameserverService) DeepCopy() *NameserverService

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NameserverService.

func (*NameserverService)DeepCopyInto¶added inv1.86.0

func (in *NameserverService) DeepCopyInto(out *NameserverService)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NameserverStatus struct {// IP is the ClusterIP of the Service fronting the deployed ts.net nameserver.// Currently, you must manually update your cluster DNS config to add// this address as a stub nameserver for ts.net for cluster workloads to be// able to resolve MagicDNS names associated with egress or Ingress// proxies.// The IP address will change if you delete and recreate the DNSConfig.// +optionalIPstring `json:"ip"`}

func (*NameserverStatus)DeepCopy¶added inv1.66.0

func (in *NameserverStatus) DeepCopy() *NameserverStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NameserverStatus.

func (*NameserverStatus)DeepCopyInto¶added inv1.66.0

func (in *NameserverStatus) DeepCopyInto(out *NameserverStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NodePortConfig struct {// The port ranges from which the operator will select NodePorts for the Services.// You must ensure that firewall rules allow UDP ingress traffic for these ports// to the node's external IPs.// The ports must be in the range of service node ports for the cluster (default `30000-32767`).// Seehttps://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport.// +kubebuilder:validation:MinItems=1Ports []PortRange `json:"ports"`// A selector which will be used to select the node's that will have their `ExternalIP`'s advertised// by the ProxyGroup as Static Endpoints.Selector map[string]string `json:"selector,omitempty"`}

func (*NodePortConfig)DeepCopy¶added inv1.86.0

func (in *NodePortConfig) DeepCopy() *NodePortConfig

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NodePortConfig.

func (*NodePortConfig)DeepCopyInto¶added inv1.86.0

func (in *NodePortConfig) DeepCopyInto(out *NodePortConfig)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Pod struct {// Labels that will be added to the proxy Pod.// Any labels specified here will be merged with the default labels// applied to the Pod by the Tailscale Kubernetes operator.// Label keys and values must be valid Kubernetes label keys and values.//https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set// +optionalLabelsLabels `json:"labels,omitempty"`// Annotations that will be added to the proxy Pod.// Any annotations specified here will be merged with the default// annotations applied to the Pod by the Tailscale Kubernetes operator.// Annotations must be valid Kubernetes annotations.//https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/#syntax-and-character-set// +optionalAnnotations map[string]string `json:"annotations,omitempty"`// Proxy Pod's affinity rules.// By default, the Tailscale Kubernetes operator does not apply any affinity rules.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#affinity// +optionalAffinity *corev1.Affinity `json:"affinity,omitempty"`// Configuration for the proxy container running tailscale.// +optionalTailscaleContainer *Container `json:"tailscaleContainer,omitempty"`// Configuration for the proxy init container that enables forwarding.// Not valid to apply to ProxyGroups of type "kube-apiserver".// +optionalTailscaleInitContainer *Container `json:"tailscaleInitContainer,omitempty"`// Proxy Pod's security context.// By default Tailscale Kubernetes operator does not apply any Pod// security context.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#security-context-2// +optionalSecurityContext *corev1.PodSecurityContext `json:"securityContext,omitempty"`// Proxy Pod's image pull Secrets.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#PodSpec// +optionalImagePullSecrets []corev1.LocalObjectReference `json:"imagePullSecrets,omitempty"`// Proxy Pod's node name.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling// +optionalNodeNamestring `json:"nodeName,omitempty"`// Proxy Pod's node selector.// By default Tailscale Kubernetes operator does not apply any node// selector.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling// +optionalNodeSelector map[string]string `json:"nodeSelector,omitempty"`// Proxy Pod's tolerations.// By default Tailscale Kubernetes operator does not apply any// tolerations.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling// +optionalTolerations []corev1.Toleration `json:"tolerations,omitempty"`// Proxy Pod's topology spread constraints.// By default Tailscale Kubernetes operator does not apply any topology spread constraints.//https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/// +optionalTopologySpreadConstraints []corev1.TopologySpreadConstraint `json:"topologySpreadConstraints,omitempty"`// PriorityClassName for the proxy Pod.// By default Tailscale Kubernetes operator does not apply any priority class.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling// +optionalPriorityClassNamestring `json:"priorityClassName,omitempty"`// DNSPolicy defines how DNS will be configured for the proxy Pod.// By default the Tailscale Kubernetes Operator does not set a DNS policy (uses cluster default).//https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-s-dns-policy// +kubebuilder:validation:Enum=ClusterFirstWithHostNet;ClusterFirst;Default;None// +optionalDNSPolicy *corev1.DNSPolicy `json:"dnsPolicy,omitempty"`// DNSConfig defines DNS parameters for the proxy Pod in addition to those generated from DNSPolicy.// When DNSPolicy is set to "None", DNSConfig must be specified.//https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config// +optionalDNSConfig *corev1.PodDNSConfig `json:"dnsConfig,omitempty"`}

func (*Pod)DeepCopy¶added inv1.60.0

func (in *Pod) DeepCopy() *Pod

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Pod.

func (*Pod)DeepCopyInto¶added inv1.60.0

func (in *Pod) DeepCopyInto(out *Pod)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PortRange struct {// port represents a port selected to be used. This is a required field.Portuint16 `json:"port"`// endPort indicates that the range of ports from port to endPort if set, inclusive,// should be used. This field cannot be defined if the port field is not defined.// The endPort must be either unset, or equal or greater than port.// +optionalEndPortuint16 `json:"endPort,omitempty"`}

func (PortRange)Contains¶added inv1.86.0

func (prPortRange) Contains(portuint16)bool

Contains reports whether port is in pr.

func (*PortRange)DeepCopy¶added inv1.86.0

func (in *PortRange) DeepCopy() *PortRange

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PortRange.

func (*PortRange)DeepCopyInto¶added inv1.86.0

func (in *PortRange) DeepCopyInto(out *PortRange)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (PortRange)IsValid¶added inv1.86.0

func (prPortRange) IsValid()bool

IsValid reports whether the port range is valid.

func (PortRange)String¶added inv1.86.0

func (prPortRange) String()string

String returns the PortRange in a string form.

type PortRanges []PortRange

func (PortRanges)All¶added inv1.86.0

func (prsPortRanges) All()iter.Seq[uint16]

All allows us to iterate over all the ports in the PortRanges

func (PortRanges)ClashesWith¶added inv1.86.0

func (prsPortRanges) ClashesWith(prPortRange)bool

ClashesWith reports whether the supplied PortRange clashes with any of the PortRanges.

func (PortRanges)Contains¶added inv1.86.0

func (prsPortRanges) Contains(portuint16)bool

Contains reports whether port is in any of the PortRanges.

func (PortRanges)DeepCopy¶added inv1.86.0

func (inPortRanges) DeepCopy()PortRanges

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PortRanges.

func (PortRanges)DeepCopyInto¶added inv1.86.0

func (inPortRanges) DeepCopyInto(out *PortRanges)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (PortRanges)String¶added inv1.86.0

func (prsPortRanges) String()string

type ProxyClass struct {metav1.TypeMeta   `json:",inline"`metav1.ObjectMeta `json:"metadata,omitempty"`// Specification of the desired state of the ProxyClass resource.//https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusSpecProxyClassSpec `json:"spec"`// +optional// Status of the ProxyClass. This is set and managed automatically.//https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusStatusProxyClassStatus `json:"status"`}

func (*ProxyClass)DeepCopy¶added inv1.60.0

func (in *ProxyClass) DeepCopy() *ProxyClass

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProxyClass.

func (*ProxyClass)DeepCopyInto¶added inv1.60.0

func (in *ProxyClass) DeepCopyInto(out *ProxyClass)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ProxyClass)DeepCopyObject¶added inv1.60.0

func (in *ProxyClass) DeepCopyObject()runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ProxyClassList struct {metav1.TypeMeta `json:",inline"`metav1.ListMeta `json:"metadata"`Items []ProxyClass `json:"items"`}

func (*ProxyClassList)DeepCopy¶added inv1.60.0

func (in *ProxyClassList) DeepCopy() *ProxyClassList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProxyClassList.

func (*ProxyClassList)DeepCopyInto¶added inv1.60.0

func (in *ProxyClassList) DeepCopyInto(out *ProxyClassList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ProxyClassList)DeepCopyObject¶added inv1.60.0

func (in *ProxyClassList) DeepCopyObject()runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ProxyClassSpec struct {// Configuration parameters for the proxy's StatefulSet. Tailscale// Kubernetes operator deploys a StatefulSet for each of the user// configured proxies (Tailscale Ingress, Tailscale Service, Connector).// +optionalStatefulSet *StatefulSet `json:"statefulSet"`// Configuration for proxy metrics. Metrics are currently not supported// for egress proxies and for Ingress proxies that have been configured// with tailscale.com/experimental-forward-cluster-traffic-via-ingress// annotation. Note that the metrics are currently considered unstable// and will likely change in breaking ways in the future - we only// recommend that you use those for debugging purposes.// +optionalMetrics *Metrics `json:"metrics,omitempty"`// TailscaleConfig contains options to configure the tailscale-specific// parameters of proxies.// +optionalTailscaleConfig *TailscaleConfig `json:"tailscale,omitempty"`// Set UseLetsEncryptStagingEnvironment to true to issue TLS// certificates for any HTTPS endpoints exposed to the tailnet from// LetsEncrypt's staging environment.//https://letsencrypt.org/docs/staging-environment/// This setting only affects Tailscale Ingress resources.// By default Ingress TLS certificates are issued from LetsEncrypt's// production environment.// Changing this setting true -> false, will result in any// existing certs being re-issued from the production environment.// Changing this setting false (default) -> true, when certs have already// been provisioned from production environment will NOT result in certs// being re-issued from the staging environment before they need to be// renewed.// +optionalUseLetsEncryptStagingEnvironmentbool `json:"useLetsEncryptStagingEnvironment,omitempty"`// Configuration for 'static endpoints' on proxies in order to facilitate// direct connections from other devices on the tailnet.// Seehttps://tailscale.com/kb/1445/kubernetes-operator-customization#static-endpoints.// +optionalStaticEndpoints *StaticEndpointsConfig `json:"staticEndpoints,omitempty"`}

func (*ProxyClassSpec)DeepCopy¶added inv1.60.0

func (in *ProxyClassSpec) DeepCopy() *ProxyClassSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProxyClassSpec.

func (*ProxyClassSpec)DeepCopyInto¶added inv1.60.0

func (in *ProxyClassSpec) DeepCopyInto(out *ProxyClassSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ProxyClassStatus struct {// List of status conditions to indicate the status of the ProxyClass.// Known condition types are `ProxyClassReady`.// +listType=map// +listMapKey=type// +optionalConditions []metav1.Condition `json:"conditions,omitempty"`}

func (*ProxyClassStatus)DeepCopy¶added inv1.60.0

func (in *ProxyClassStatus) DeepCopy() *ProxyClassStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProxyClassStatus.

func (*ProxyClassStatus)DeepCopyInto¶added inv1.60.0

func (in *ProxyClassStatus) DeepCopyInto(out *ProxyClassStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ProxyGroup struct {metav1.TypeMeta   `json:",inline"`metav1.ObjectMeta `json:"metadata,omitempty"`// Spec describes the desired ProxyGroup instances.SpecProxyGroupSpec `json:"spec"`// ProxyGroupStatus describes the status of the ProxyGroup resources. This is// set and managed by the Tailscale operator.// +optionalStatusProxyGroupStatus `json:"status"`}

func (*ProxyGroup)DeepCopy¶added inv1.76.0

func (in *ProxyGroup) DeepCopy() *ProxyGroup

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProxyGroup.

func (*ProxyGroup)DeepCopyInto¶added inv1.76.0

func (in *ProxyGroup) DeepCopyInto(out *ProxyGroup)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ProxyGroup)DeepCopyObject¶added inv1.76.0

func (in *ProxyGroup) DeepCopyObject()runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ProxyGroupList struct {metav1.TypeMeta `json:",inline"`metav1.ListMeta `json:"metadata"`Items []ProxyGroup `json:"items"`}

func (*ProxyGroupList)DeepCopy¶added inv1.76.0

func (in *ProxyGroupList) DeepCopy() *ProxyGroupList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProxyGroupList.

func (*ProxyGroupList)DeepCopyInto¶added inv1.76.0

func (in *ProxyGroupList) DeepCopyInto(out *ProxyGroupList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ProxyGroupList)DeepCopyObject¶added inv1.76.0

func (in *ProxyGroupList) DeepCopyObject()runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ProxyGroupSpec struct {// Type of the ProxyGroup proxies. Supported types are egress, ingress, and kube-apiserver.// Type is immutable once a ProxyGroup is created.// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="ProxyGroup type is immutable"TypeProxyGroupType `json:"type"`// Tags that the Tailscale devices will be tagged with. Defaults to [tag:k8s].// If you specify custom tags here, make sure you also make the operator// an owner of these tags.// Seehttps://tailscale.com/kb/1236/kubernetes-operator/#setting-up-the-kubernetes-operator.// Tags cannot be changed once a ProxyGroup device has been created.// Tag values must be in form ^tag:[a-zA-Z][a-zA-Z0-9-]*$.// +optionalTagsTags `json:"tags,omitempty"`// Replicas specifies how many replicas to create the StatefulSet with.// Defaults to 2.// +optional// +kubebuilder:validation:Minimum=0Replicas *int32 `json:"replicas,omitempty"`// HostnamePrefix is the hostname prefix to use for tailnet devices created// by the ProxyGroup. Each device will have the integer number from its// StatefulSet pod appended to this prefix to form the full hostname.// HostnamePrefix can contain lower case letters, numbers and dashes, it// must not start with a dash and must be between 1 and 62 characters long.// +optionalHostnamePrefixHostnamePrefix `json:"hostnamePrefix,omitempty"`// ProxyClass is the name of the ProxyClass custom resource that contains// configuration options that should be applied to the resources created// for this ProxyGroup. If unset, and there is no default ProxyClass// configured, the operator will create resources with the default// configuration.// +optionalProxyClassstring `json:"proxyClass,omitempty"`// KubeAPIServer contains configuration specific to the kube-apiserver// ProxyGroup type. This field is only used when Type is set to "kube-apiserver".// +optionalKubeAPIServer *KubeAPIServerConfig `json:"kubeAPIServer,omitempty"`}

func (*ProxyGroupSpec)DeepCopy¶added inv1.76.0

func (in *ProxyGroupSpec) DeepCopy() *ProxyGroupSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProxyGroupSpec.

func (*ProxyGroupSpec)DeepCopyInto¶added inv1.76.0

func (in *ProxyGroupSpec) DeepCopyInto(out *ProxyGroupSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ProxyGroupStatus struct {// List of status conditions to indicate the status of the ProxyGroup// resources. Known condition types include `ProxyGroupReady` and// `ProxyGroupAvailable`.//// * `ProxyGroupReady` indicates all ProxyGroup resources are reconciled and//   all expected conditions are true.// * `ProxyGroupAvailable` indicates that at least one proxy is ready to//   serve traffic.//// For ProxyGroups of type kube-apiserver, there are two additional conditions://// * `KubeAPIServerProxyConfigured` indicates that at least one API server//   proxy is configured and ready to serve traffic.// * `KubeAPIServerProxyValid` indicates that spec.kubeAPIServer config is//   valid.//// +listType=map// +listMapKey=type// +optionalConditions []metav1.Condition `json:"conditions,omitempty"`// List of tailnet devices associated with the ProxyGroup StatefulSet.// +listType=map// +listMapKey=hostname// +optionalDevices []TailnetDevice `json:"devices,omitempty"`// URL of the kube-apiserver proxy advertised by the ProxyGroup devices, if// any. Only applies to ProxyGroups of type kube-apiserver.// +optionalURLstring `json:"url,omitempty"`}

func (*ProxyGroupStatus)DeepCopy¶added inv1.76.0

func (in *ProxyGroupStatus) DeepCopy() *ProxyGroupStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProxyGroupStatus.

func (*ProxyGroupStatus)DeepCopyInto¶added inv1.76.0

func (in *ProxyGroupStatus) DeepCopyInto(out *ProxyGroupStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ProxyGroupTypestring

type Recorder struct {metav1.TypeMeta   `json:",inline"`metav1.ObjectMeta `json:"metadata,omitempty"`// Spec describes the desired recorder instance.SpecRecorderSpec `json:"spec"`// RecorderStatus describes the status of the recorder. This is set// and managed by the Tailscale operator.// +optionalStatusRecorderStatus `json:"status"`}

func (*Recorder)DeepCopy¶added inv1.74.0

func (in *Recorder) DeepCopy() *Recorder

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Recorder.

func (*Recorder)DeepCopyInto¶added inv1.74.0

func (in *Recorder) DeepCopyInto(out *Recorder)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Recorder)DeepCopyObject¶added inv1.74.0

func (in *Recorder) DeepCopyObject()runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type RecorderContainer struct {// List of environment variables to set in the container.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#environment-variables// Note that environment variables provided here will take precedence// over Tailscale-specific environment variables set by the operator,// however running proxies with custom values for Tailscale environment// variables (i.e TS_USERSPACE) is not recommended and might break in// the future.// +optionalEnv []Env `json:"env,omitempty"`// Container image name including tag. Defaults to docker.io/tailscale/tsrecorder// with the same tag as the operator, but the official images are also// available at ghcr.io/tailscale/tsrecorder.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#image// +optionalImagestring `json:"image,omitempty"`// Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#image// +kubebuilder:validation:Enum=Always;Never;IfNotPresent// +optionalImagePullPolicycorev1.PullPolicy `json:"imagePullPolicy,omitempty"`// Container resource requirements.// By default, the operator does not apply any resource requirements. The// amount of resources required wil depend on the volume of recordings sent.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#resources// +optionalResourcescorev1.ResourceRequirements `json:"resources,omitempty"`// Container security context. By default, the operator does not apply any// container security context.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#security-context// +optionalSecurityContext *corev1.SecurityContext `json:"securityContext,omitempty"`}

func (*RecorderContainer)DeepCopy¶added inv1.74.0

func (in *RecorderContainer) DeepCopy() *RecorderContainer

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RecorderContainer.

func (*RecorderContainer)DeepCopyInto¶added inv1.74.0

func (in *RecorderContainer) DeepCopyInto(out *RecorderContainer)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type RecorderList struct {metav1.TypeMeta `json:",inline"`metav1.ListMeta `json:"metadata"`Items []Recorder `json:"items"`}

func (*RecorderList)DeepCopy¶added inv1.74.0

func (in *RecorderList) DeepCopy() *RecorderList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RecorderList.

func (*RecorderList)DeepCopyInto¶added inv1.74.0

func (in *RecorderList) DeepCopyInto(out *RecorderList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*RecorderList)DeepCopyObject¶added inv1.74.0

func (in *RecorderList) DeepCopyObject()runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type RecorderPod struct {// Labels that will be added to Recorder Pods. Any labels specified here// will be merged with the default labels applied to the Pod by the operator.//https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set// +optionalLabels map[string]string `json:"labels,omitempty"`// Annotations that will be added to Recorder Pods. Any annotations// specified here will be merged with the default annotations applied to// the Pod by the operator.//https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/#syntax-and-character-set// +optionalAnnotations map[string]string `json:"annotations,omitempty"`// Affinity rules for Recorder Pods. By default, the operator does not// apply any affinity rules.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#affinity// +optionalAffinity *corev1.Affinity `json:"affinity,omitempty"`// Configuration for the Recorder container running tailscale.// +optionalContainerRecorderContainer `json:"container,omitempty"`// Security context for Recorder Pods. By default, the operator does not// apply any Pod security context.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#security-context-2// +optionalSecurityContext *corev1.PodSecurityContext `json:"securityContext,omitempty"`// Image pull Secrets for Recorder Pods.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#PodSpec// +optionalImagePullSecrets []corev1.LocalObjectReference `json:"imagePullSecrets,omitempty"`// Node selector rules for Recorder Pods. By default, the operator does// not apply any node selector rules.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling// +optionalNodeSelector map[string]string `json:"nodeSelector,omitempty"`// Tolerations for Recorder Pods. By default, the operator does not apply// any tolerations.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling// +optionalTolerations []corev1.Toleration `json:"tolerations,omitempty"`// Config for the ServiceAccount to create for the Recorder's StatefulSet.// By default, the operator will create a ServiceAccount with the same// name as the Recorder resource.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#service-account// +optionalServiceAccountRecorderServiceAccount `json:"serviceAccount,omitempty"`}

func (*RecorderPod)DeepCopy¶added inv1.74.0

func (in *RecorderPod) DeepCopy() *RecorderPod

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RecorderPod.

func (*RecorderPod)DeepCopyInto¶added inv1.74.0

func (in *RecorderPod) DeepCopyInto(out *RecorderPod)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type RecorderServiceAccount struct {// Name of the ServiceAccount to create. Defaults to the name of the// Recorder resource.//https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#service-account// +kubebuilder:validation:Type=string// +kubebuilder:validation:Pattern=`^[a-z0-9]([a-z0-9-.]{0,61}[a-z0-9])?$`// +kubebuilder:validation:MaxLength=253// +optionalNamestring `json:"name,omitempty"`// Annotations to add to the ServiceAccount.//https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/#syntax-and-character-set//// You can use this to add IAM roles to the ServiceAccount (IRSA) instead of// providing static S3 credentials in a Secret.//https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html//// For example:// eks.amazonaws.com/role-arn: arn:aws:iam::<account-id>:role/<role-name>// +optionalAnnotations map[string]string `json:"annotations,omitempty"`}

func (*RecorderServiceAccount)DeepCopy¶added inv1.84.0

func (in *RecorderServiceAccount) DeepCopy() *RecorderServiceAccount

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RecorderServiceAccount.

func (*RecorderServiceAccount)DeepCopyInto¶added inv1.84.0

func (in *RecorderServiceAccount) DeepCopyInto(out *RecorderServiceAccount)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type RecorderSpec struct {// Configuration parameters for the Recorder's StatefulSet. The operator// deploys a StatefulSet for each Recorder resource.// +optionalStatefulSetRecorderStatefulSet `json:"statefulSet"`// Tags that the Tailscale device will be tagged with. Defaults to [tag:k8s].// If you specify custom tags here, make sure you also make the operator// an owner of these tags.// Seehttps://tailscale.com/kb/1236/kubernetes-operator/#setting-up-the-kubernetes-operator.// Tags cannot be changed once a Recorder node has been created.// Tag values must be in form ^tag:[a-zA-Z][a-zA-Z0-9-]*$.// +optionalTagsTags `json:"tags,omitempty"`// Set to true to enable the Recorder UI. The UI lists and plays recorded sessions.// The UI will be served at <MagicDNS name of the recorder>:443. Defaults to false.// Corresponds to --ui tsrecorder flaghttps://tailscale.com/kb/1246/tailscale-ssh-session-recording#deploy-a-recorder-node.// Required if S3 storage is not set up, to ensure that recordings are accessible.// +optionalEnableUIbool `json:"enableUI,omitempty"`// Configure where to store session recordings. By default, recordings will// be stored in a local ephemeral volume, and will not be persisted past the// lifetime of a specific pod.// +optionalStorageStorage `json:"storage,omitempty"`// Replicas specifies how many instances of tsrecorder to run. Defaults to 1.// +optional// +kubebuilder:validation:Minimum=0Replicas *int32 `json:"replicas,omitzero"`}

func (*RecorderSpec)DeepCopy¶added inv1.74.0

func (in *RecorderSpec) DeepCopy() *RecorderSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RecorderSpec.

func (*RecorderSpec)DeepCopyInto¶added inv1.74.0

func (in *RecorderSpec) DeepCopyInto(out *RecorderSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type RecorderStatefulSet struct {// Labels that will be added to the StatefulSet created for the Recorder.// Any labels specified here will be merged with the default labels applied// to the StatefulSet by the operator.//https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set// +optionalLabels map[string]string `json:"labels,omitempty"`// Annotations that will be added to the StatefulSet created for the Recorder.// Any Annotations specified here will be merged with the default annotations// applied to the StatefulSet by the operator.//https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/#syntax-and-character-set// +optionalAnnotations map[string]string `json:"annotations,omitempty"`// Configuration for pods created by the Recorder's StatefulSet.// +optionalPodRecorderPod `json:"pod,omitempty"`}

func (*RecorderStatefulSet)DeepCopy¶added inv1.74.0

func (in *RecorderStatefulSet) DeepCopy() *RecorderStatefulSet

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RecorderStatefulSet.

func (*RecorderStatefulSet)DeepCopyInto¶added inv1.74.0

func (in *RecorderStatefulSet) DeepCopyInto(out *RecorderStatefulSet)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type RecorderStatus struct {// List of status conditions to indicate the status of the Recorder.// Known condition types are `RecorderReady`.// +listType=map// +listMapKey=type// +optionalConditions []metav1.Condition `json:"conditions,omitempty"`// List of tailnet devices associated with the Recorder StatefulSet.// +listType=map// +listMapKey=hostname// +optionalDevices []RecorderTailnetDevice `json:"devices,omitempty"`}

func (*RecorderStatus)DeepCopy¶added inv1.74.0

func (in *RecorderStatus) DeepCopy() *RecorderStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RecorderStatus.

func (*RecorderStatus)DeepCopyInto¶added inv1.74.0

func (in *RecorderStatus) DeepCopyInto(out *RecorderStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type RecorderTailnetDevice struct {// Hostname is the fully qualified domain name of the device.// If MagicDNS is enabled in your tailnet, it is the MagicDNS name of the// node.Hostnamestring `json:"hostname"`// TailnetIPs is the set of tailnet IP addresses (both IPv4 and IPv6)// assigned to the device.// +optionalTailnetIPs []string `json:"tailnetIPs,omitempty"`// URL where the UI is available if enabled for replaying recordings. This// will be an HTTPS MagicDNS URL. You must be connected to the same tailnet// as the recorder to access it.// +optionalURLstring `json:"url,omitempty"`}

func (*RecorderTailnetDevice)DeepCopy¶added inv1.76.0

func (in *RecorderTailnetDevice) DeepCopy() *RecorderTailnetDevice

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RecorderTailnetDevice.

func (*RecorderTailnetDevice)DeepCopyInto¶added inv1.76.0

func (in *RecorderTailnetDevice) DeepCopyInto(out *RecorderTailnetDevice)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Routestring

type Routes []Route

func (Routes)DeepCopy¶

func (inRoutes) DeepCopy()Routes

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Routes.

func (Routes)DeepCopyInto¶

func (inRoutes) DeepCopyInto(out *Routes)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (Routes)Stringify¶

func (routesRoutes) Stringify()string

type S3 struct {// S3-compatible endpoint, e.g. s3.us-east-1.amazonaws.com.Endpointstring `json:"endpoint,omitempty"`// Bucket name to write to. The bucket is expected to be used solely for// recordings, as there is no stable prefix for written object names.Bucketstring `json:"bucket,omitempty"`// Configure environment variable credentials for managing objects in the// configured bucket. If not set, tsrecorder will try to acquire credentials// first from the file system and then the STS API.// +optionalCredentialsS3Credentials `json:"credentials,omitempty"`}

func (*S3)DeepCopy¶added inv1.74.0

func (in *S3) DeepCopy() *S3

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new S3.

func (*S3)DeepCopyInto¶added inv1.74.0

func (in *S3) DeepCopyInto(out *S3)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type S3Credentials struct {// Use a Kubernetes Secret from the operator's namespace as the source of// credentials.// +optionalSecretS3Secret `json:"secret,omitempty"`}

func (*S3Credentials)DeepCopy¶added inv1.74.0

func (in *S3Credentials) DeepCopy() *S3Credentials

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new S3Credentials.

func (*S3Credentials)DeepCopyInto¶added inv1.74.0

func (in *S3Credentials) DeepCopyInto(out *S3Credentials)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type S3Secret struct {// The name of a Kubernetes Secret in the operator's namespace that contains// credentials for writing to the configured bucket. Each key-value pair// from the secret's data will be mounted as an environment variable. It// should include keys for AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY if// using a static access key.//+optionalNamestring `json:"name,omitempty"`}

func (*S3Secret)DeepCopy¶added inv1.74.0

func (in *S3Secret) DeepCopy() *S3Secret

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new S3Secret.

func (*S3Secret)DeepCopyInto¶added inv1.74.0

func (in *S3Secret) DeepCopyInto(out *S3Secret)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ServiceMonitor struct {// If Enable is set to true, a Prometheus ServiceMonitor will be created. Enable can only be set to true if metrics are enabled.Enablebool `json:"enable"`// Labels to add to the ServiceMonitor.// Labels must be valid Kubernetes labels.//https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set// +optionalLabelsLabels `json:"labels"`}

func (*ServiceMonitor)DeepCopy¶added inv1.78.0

func (in *ServiceMonitor) DeepCopy() *ServiceMonitor

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceMonitor.

func (*ServiceMonitor)DeepCopyInto¶added inv1.78.0

func (in *ServiceMonitor) DeepCopyInto(out *ServiceMonitor)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type StatefulSet struct {// Labels that will be added to the StatefulSet created for the proxy.// Any labels specified here will be merged with the default labels// applied to the StatefulSet by the Tailscale Kubernetes operator as// well as any other labels that might have been applied by other// actors.// Label keys and values must be valid Kubernetes label keys and values.//https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set// +optionalLabelsLabels `json:"labels,omitempty"`// Annotations that will be added to the StatefulSet created for the proxy.// Any Annotations specified here will be merged with the default annotations// applied to the StatefulSet by the Tailscale Kubernetes operator as// well as any other annotations that might have been applied by other// actors.// Annotations must be valid Kubernetes annotations.//https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/#syntax-and-character-set// +optionalAnnotations map[string]string `json:"annotations,omitempty"`// Configuration for the proxy Pod.// +optionalPod *Pod `json:"pod,omitempty"`}

func (*StatefulSet)DeepCopy¶added inv1.60.0

func (in *StatefulSet) DeepCopy() *StatefulSet

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new StatefulSet.

func (*StatefulSet)DeepCopyInto¶added inv1.60.0

func (in *StatefulSet) DeepCopyInto(out *StatefulSet)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type StaticEndpointsConfig struct {// The configuration for static endpoints using NodePort Services.NodePort *NodePortConfig `json:"nodePort"`}

func (*StaticEndpointsConfig)DeepCopy¶added inv1.86.0

func (in *StaticEndpointsConfig) DeepCopy() *StaticEndpointsConfig

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new StaticEndpointsConfig.

func (*StaticEndpointsConfig)DeepCopyInto¶added inv1.86.0

func (in *StaticEndpointsConfig) DeepCopyInto(out *StaticEndpointsConfig)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Storage struct {// Configure an S3-compatible API for storage. Required if the UI is not// enabled, to ensure that recordings are accessible.// +optionalS3 *S3 `json:"s3,omitempty"`}

func (*Storage)DeepCopy¶added inv1.74.0

func (in *Storage) DeepCopy() *Storage

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Storage.

func (*Storage)DeepCopyInto¶added inv1.74.0

func (in *Storage) DeepCopyInto(out *Storage)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SubnetRouter struct {// AdvertiseRoutes refer to CIDRs that the subnet router should make// available. Route values must be strings that represent a valid IPv4// or IPv6 CIDR range. Values can be Tailscale 4via6 subnet routes.//https://tailscale.com/kb/1201/4via6-subnets/AdvertiseRoutesRoutes `json:"advertiseRoutes"`}

func (*SubnetRouter)DeepCopy¶

func (in *SubnetRouter) DeepCopy() *SubnetRouter

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SubnetRouter.

func (*SubnetRouter)DeepCopyInto¶

func (in *SubnetRouter) DeepCopyInto(out *SubnetRouter)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Tagstring

type Tags []Tag

func (Tags)DeepCopy¶

func (inTags) DeepCopy()Tags

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Tags.

func (Tags)DeepCopyInto¶

func (inTags) DeepCopyInto(out *Tags)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (Tags)Stringify¶

func (tagsTags) Stringify() []string

type TailnetDevice struct {// Hostname is the fully qualified domain name of the device.// If MagicDNS is enabled in your tailnet, it is the MagicDNS name of the// node.Hostnamestring `json:"hostname"`// TailnetIPs is the set of tailnet IP addresses (both IPv4 and IPv6)// assigned to the device.// +optionalTailnetIPs []string `json:"tailnetIPs,omitempty"`// StaticEndpoints are user configured, 'static' endpoints by which tailnet peers can reach this device.// +optionalStaticEndpoints []string `json:"staticEndpoints,omitempty"`}

func (*TailnetDevice)DeepCopy¶added inv1.74.0

func (in *TailnetDevice) DeepCopy() *TailnetDevice

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TailnetDevice.

func (*TailnetDevice)DeepCopyInto¶added inv1.74.0

func (in *TailnetDevice) DeepCopyInto(out *TailnetDevice)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TailscaleConfig struct {// AcceptRoutes can be set to true to make the proxy instance accept// routes advertized by other nodes on the tailnet, such as subnet// routes.// This is equivalent of passing --accept-routes flag to a tailscale Linux client.//https://tailscale.com/kb/1019/subnets#use-your-subnet-routes-from-other-devices// Defaults to false.AcceptRoutesbool `json:"acceptRoutes,omitempty"`}

func (*TailscaleConfig)DeepCopy¶added inv1.68.0

func (in *TailscaleConfig) DeepCopy() *TailscaleConfig

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TailscaleConfig.

func (*TailscaleConfig)DeepCopyInto¶added inv1.68.0

func (in *TailscaleConfig) DeepCopyInto(out *TailscaleConfig)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.