megachangelog
Improvement1.92.3

Tailscale Kubernetes Operator v1.92.3

This release adds workload identity federation support for tailnet authentication and HTTP-to-HTTPS redirect annotations for Ingress resources. It also improves operator defaults, enables multi-replica Recorder deployments, fixes ArgoCD compatibility, and resolves issues with managed Ingress reconciliation and ProxyGroup-backed Ingress deletion.

A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions.

  • New: The operator supports workload identity federation for authenticating to a tailnet using provider-native identity tokens.
  • New: tailscale.com/http-redirect annotation can be applied to Ingress resources for enabling HTTP to HTTPS redirects.
  • Changed: The operator defaults to using the stable image for nameservers deployed using the DNSConfig resource.
  • Changed: Recorder resources can specify a replica count for highly available deployments. Using multiple replicas requires using an S3 storage backend.
  • Fixed: ArgoCD compatibility is improved. You can use both boolean and string values when setting the apiServerProxyConfig.mode and apiServerProxyConfig.allowImpersonation values.
  • Fixed: The operator correctly reconciles managed Ingresses sharing the same namespace as other unmanaged Ingresses.
  • Fixed: ProxyGroup backed ingresses no longer get stuck during deletion if they use a Tailscale Service that had been deleted.
kubernetesoperatoridentityingressdns

Source: original entry ↗

More from Tailscale

Follow Tailscale to get its new changes in your feed and email digest.

Improvement1.104.1

Tailscale Kubernetes Operator v1.104.1

The Tailscale Kubernetes Operator v1.104.1 introduces shared Let's Encrypt account keys for ingress ProxyGroups, custom UDP ports for PeerRelay, image pull secrets support in DNSConfig, improved rolling updates for egress ProxyGroups, and fixes for coordination server URL configuration and HA Service cleanup. New Helm chart customization options and security improvements are also included.

kubernetesoperatorhelmnetworkingsecurity
Announcement1.104.1

Tailscale container image v1.104.1

A new release of the Tailscale container image is available on Docker Hub and GitHub packages repository. This version includes library updates only.

containerdockerreleasedependencies
Feature

Device Posture Monitoring and Alerts

Admins can now configure monitoring and alerts for device posture to help diagnose connectivity problems. New capabilities include badges on the Machines page, filtering by failing postures, custom error messages on clients, and push notifications for posture failures.

posturemonitoringalertsadmin-consolecompliance
See all Tailscale changes →