Improvement1.92.5
Tailscale Kubernetes Operator v1.92.5
Certificate renewal now avoids ARI orders by default to prevent failures when ACME account keys are recreated. Hardware attestation keys are no longer stored in Kubernetes Secrets, enabling node migration for the operator.
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions.
- Changed: Certificate renewal is no longer done as an ARI order by default to avoid renewal failure if ACME account keys are recreated.
- Fixed: Hardware attestation keys are no longer added to Kubernetes state
Secrets, making it possible to change the Kubernetes node the Tailscale Kubernetes Operator is deployed on.
kubernetesoperatorcertificatessecurityreliability
Source: original entry ↗