9 Commits (f4cc1b8788f25ddacf68634e8f134aac499b6c3b)

Author	SHA1	Message	Date
Brad Davidson	b550e1183a	Remove control-plane egress context and fix agent mode. ... The control-plane context handles requests outside the cluster and should not be sent to the proxy. In agent mode, we don't watch pods and just direct-dial any request for a non-node address, which is the original behavior. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2022-06-10 10:14:15 -07:00
Brad Davidson	d3242bea3c	Refactor egress-selector pods mode to watch pods ... Watching pods appears to be the most reliable way to ensure that the proxy routes and authorizes connections. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2022-06-08 09:34:53 -07:00
Brad Davidson	9d7230496d	Add support for configuring the EgressSelector mode ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2022-05-18 13:26:10 -07:00
Brad Davidson	ce5b9347c9	Replace DefaultProxyDialerFn dialer injection with EgressSelector support ... Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2022-04-29 17:54:36 -07:00
Brad Davidson	af0b496ef3	Add client certificate authentication support to core Authenticator ... This is required to make the websocket tunnel server functional on etcd-only nodes, and will save some code on the RKE2 side once pulled through. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2022-04-06 13:03:14 -07:00
Darren Shepherd	3396a7b099	If tunnel session does not exist fallback to default dialer	2020-01-22 11:04:41 -07:00
Darren Shepherd	ba240d0611	Refactor tokens, bootstrap, and cli args	2019-10-30 19:06:49 -07:00
Darren Shepherd	c0702b0492	Port to wrangler	2019-05-26 22:28:50 -07:00
Darren Shepherd	9bb7c27c62	Initial Commit	2019-01-01 01:23:01 -07:00