Irbe Krumina 90b4358113 cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252) ...

In dynamically changing environments where ACME account keys and certs
are stored separately, it can happen that the account key would get
deleted (and recreated) between issuances. If that is the case,
we currently fail renewals and the only way to recover is for users
to delete certs.
This adds a config knob to allow opting out of the replaces extension
and utilizes it in the Kubernetes operator where there are known
user workflows that could end up with this edge case.

Updates #18251

Signed-off-by: Irbe Krumina <irbe@tailscale.com>

2025-12-19 15:59:26 +00:00

..

auditlog

syncs: add Mutex/RWMutex alias/wrappers for future mutex debugging

2025-11-16 19:13:59 -08:00

conffile

cmd/tailscale/cli,ipn/conffile: add declarative config mode for Services (#17435)

2025-10-10 11:02:35 -04:00

desktop

go.mod: bump golang.org/x/crypto (#17907)

2025-11-17 09:05:18 -08:00

ipnauth

all: use buildfeature constants in a few more places

2025-10-03 10:08:06 -07:00

ipnext

ipn/ipnlocal: remove all the weird locking (LockedOnEntry, UnlockEarly, etc)

2025-11-13 19:20:07 -08:00

ipnlocal

cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252)

2025-12-19 15:59:26 +00:00

ipnserver

feature/featuretags, all: add build features, use existing ones in more places

2025-10-02 08:07:25 -07:00

ipnstate

cmd/tailscale/cli: stabilise the output of tailscale lock status --json

2025-12-09 09:40:06 +00:00

lapitest

various: allow tailscaled shutdown via LocalAPI

2025-09-25 14:26:06 -05:00

localapi

client/local: add method to set gauge metric to a value

2025-12-16 14:11:33 -08:00

policy

ipn,tailconfig: clean up unreleased and removed app connector service

2023-11-09 22:36:52 -08:00

store

ipn/store, feature/condregister: permit callers to empty import optonal ipn stores

2025-10-01 07:52:57 -07:00

backend_test.go

ipn: fix the string representation of an empty ipn.Notify

2025-09-16 18:13:49 +01:00

backend.go

types/netmap: remove PrivateKey from NetworkMap

2025-11-16 15:32:51 -08:00

conf.go

ipn: ensure that conffile is source of truth for advertised services. (#15361)

2025-03-20 14:40:36 +00:00

doc.go

ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate

2025-01-30 18:12:54 -06:00

ipn_clone.go

cmd/tailscale/cli,ipn,all: make peer relay server port a *uint16

2025-11-25 19:40:17 -08:00

ipn_test.go

all: do not depend on the testing package

2024-05-24 05:23:36 -07:00

ipn_view.go

cmd/tailscale/cli,ipn,all: make peer relay server port a *uint16

2025-11-25 19:40:17 -08:00

prefs_test.go

cmd/tailscale/cli,ipn,all: make peer relay server port a *uint16

2025-11-25 19:40:17 -08:00

prefs.go

cmd/tailscale/cli,ipn,all: make peer relay server port a *uint16

2025-11-25 19:40:17 -08:00

serve_expand_test.go

cmd/tailscale,ipn: add Unix socket support for serve

2025-12-04 11:06:06 -08:00

serve_test.go

ipn/serve: validate service paths in HasPathHandler

2025-11-25 16:27:37 -05:00

serve.go

cmd/tailscale,ipn: add Unix socket support for serve

2025-12-04 11:06:06 -08:00

store_test.go

ipn/store: automatically migrate between plaintext and encrypted state (#16318)

2025-06-26 17:09:13 -07:00

store.go

cmd/tailscaled,ipn: show a health warning when state store fails to open (#17883)

2025-11-20 15:52:58 -06:00