tailscale/cmd/k8s-operator
Artem Leshchev 5652b6c9c0
cmd/k8s-operator: fix token exchange for identity federation (#19845)
tailscale-client-go-v2 natively supports identity federation authentication,
and in #19010 the required authentication provider is used, but the manual
token exchange was never removed, so we were exchanging JWT token to an auth
token, and then were trying to use that auth token for exchange once again.
This commit removes the legacy mechanism, fully relying on
tailscale-client-go-v2 to handle authentication.

Fixes #19844

Signed-off-by: Artem Leshchev <matshch@avride.ai>
2026-05-27 16:45:07 +01:00
..
deploy cmd/k8s-operator: add nodeSelector to DNSConfig resource (#19429) 2026-04-29 15:56:33 +01:00
e2e cmd/k8s-operator: use dynamic resource names in e2e ingress tests (#19536) 2026-04-27 13:40:46 +01:00
generate cmd/k8s-operator,k8s-operator: define ProxyGroupPolicy reconciler (#18654) 2026-02-18 09:34:55 +00:00
api-server-proxy-pg_test.go cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010) 2026-04-09 14:39:46 +01:00
api-server-proxy-pg.go cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010) 2026-04-09 14:39:46 +01:00
api-server-proxy.go types/ptr: deprecate ptr.To, use Go 1.26 new 2026-03-05 20:13:18 -08:00
connector_test.go cmd/k8s-operator, net/netutil: support 4via6 in egress proxy and connector (#19863) 2026-05-27 10:54:35 +01:00
connector.go cmd/k8s-operator, net/netutil: support 4via6 in egress proxy and connector (#19863) 2026-05-27 10:54:35 +01:00
depaware.txt cmd/k8s-operator: fix token exchange for identity federation (#19845) 2026-05-27 16:45:07 +01:00
dnsrecords_test.go types/ptr: deprecate ptr.To, use Go 1.26 new 2026-03-05 20:13:18 -08:00
dnsrecords.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
egress-eps_test.go all: use Go 1.26 things, run most gofix modernizers 2026-03-06 13:32:03 -08:00
egress-eps.go cmd/{containerboot,k8s-operator}: don't return pointers to maps (#19593) 2026-04-30 16:11:00 +01:00
egress-pod-readiness_test.go types/ptr: deprecate ptr.To, use Go 1.26 new 2026-03-05 20:13:18 -08:00
egress-pod-readiness.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
egress-services_test.go cmd/{containerboot,k8s-operator}: don't return pointers to maps (#19593) 2026-04-30 16:11:00 +01:00
egress-services-readiness_test.go all: use Go 1.26 things, run most gofix modernizers 2026-03-06 13:32:03 -08:00
egress-services-readiness.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
egress-services.go cmd/{containerboot,k8s-operator}: don't return pointers to maps (#19593) 2026-04-30 16:11:00 +01:00
ingress_test.go Construct IPv6 ingress URLs correctly 2026-05-20 17:21:35 -07:00
ingress-for-pg_test.go cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010) 2026-04-09 14:39:46 +01:00
ingress-for-pg.go cmd/k8s-operator: truncate long label values in metrics resources (#18895) 2026-04-28 14:11:59 +01:00
ingress.go Construct IPv6 ingress URLs correctly 2026-05-20 17:21:35 -07:00
logger.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
metrics_resources.go cmd/k8s-operator: truncate long label values in metrics resources (#18895) 2026-04-28 14:11:59 +01:00
nameserver_test.go cmd/k8s-operator: add nodeSelector to DNSConfig resource (#19429) 2026-04-29 15:56:33 +01:00
nameserver.go cmd/k8s-operator: add nodeSelector to DNSConfig resource (#19429) 2026-04-29 15:56:33 +01:00
nodeport-service-ports.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
nodeport-services-ports_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
operator_test.go cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010) 2026-04-09 14:39:46 +01:00
operator.go cmd/k8s-operator: add authkey reissuing to recorder reconciler (#19556) 2026-05-01 18:26:55 +01:00
proxyclass_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
proxyclass.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
proxygroup_specs.go all: use Go 1.26 things, run most gofix modernizers 2026-03-06 13:32:03 -08:00
proxygroup_test.go cmd/k8s-operator: stabilize StaticEndpoints order in ProxyGroup reconciles (#19755) 2026-05-27 14:28:04 +01:00
proxygroup.go cmd/k8s-operator: stabilize StaticEndpoints order in ProxyGroup reconciles (#19755) 2026-05-27 14:28:04 +01:00
sts_test.go cmd/vet: add subtestnames analyzer; fix all existing violations 2026-04-05 15:52:51 -07:00
sts.go cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010) 2026-04-09 14:39:46 +01:00
svc_test.go cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010) 2026-04-09 14:39:46 +01:00
svc-for-pg_test.go cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010) 2026-04-09 14:39:46 +01:00
svc-for-pg.go cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010) 2026-04-09 14:39:46 +01:00
svc.go cmd/k8s-operator: fix Service reconcile triggers for default ProxyClass (#18983) 2026-03-13 14:31:16 +00:00
testutils_test.go cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010) 2026-04-09 14:39:46 +01:00
tsclient.go cmd/k8s-operator: fix token exchange for identity federation (#19845) 2026-05-27 16:45:07 +01:00
tsrecorder_specs_test.go cmd/vet: add subtestnames analyzer; fix all existing violations 2026-04-05 15:52:51 -07:00
tsrecorder_specs.go all: use Go 1.26 things, run most gofix modernizers 2026-03-06 13:32:03 -08:00
tsrecorder_test.go cmd/k8s-operator: add authkey reissuing to recorder reconciler (#19556) 2026-05-01 18:26:55 +01:00
tsrecorder.go cmd/k8s-operator: add authkey reissuing to recorder reconciler (#19556) 2026-05-01 18:26:55 +01:00