Merged
Conversation
This allows for a custom domain in the k8s-nameserver application. It can be set via an argument to the binary and will default to ts.net if not set.
This allows to deploy a dnsConfig resource via the helm chart.
This allows to customize the nameserver deployment via the DNSConfig CRD. It allows to set the command, environment variables and pod labels.
This allows to customize the FQDN validation of tailscale services.
When comparing the node names to the received network peer map in "containerboot", it might be that network peers have no final dot appended to their FQDN. In that case, the operator should also not add a final dot to the FQDN. With the help of the OPERATOR_NO_FQDN_DOT_APPEND env variable this can be achieved and there will be no dot added to the content of the TS_TAILNET_TARGET_FQDN env variable which is read by "containerboot".
This adds an argument for the k8s-nameserver to watch and read the dnsrecods configMap directly. As the default way of mount propagating the dnsrecords might take some time to sync when the configMap updates, reading and watching the configMap directly should reduce this time.
This fixes the referenced role in the nameserver service account role binding
This was referenced Jul 7, 2025
Closed
Closed
Closed
ctrox
approved these changes
Jul 8, 2025
thirdeyenick
force-pushed
the
bring-back-commits
branch
from
d699a2b to
5253f3a
Compare
It seems windows tests need a big github runner which we do not have currently. vm tests seem to need higher privileges and are disabled by default on third party repos (forks), so ee therefore disable these tests.
thirdeyenick
force-pushed
the
bring-back-commits
branch
from
5253f3a to
80e5c9c
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This applies our customizations on top of the current tailscale repository. There is no need to pass the controlURL via env variable as this was already added upstream.