tailscale / tailscale/tailscale

FR: Support running the Kubernetes operator API server proxy over HTTP

Open
#19,319 1 comment 0 reactions 0 assignees View on GitHub
Backlog fr kubernetes
Dominant language
Go
Stars
36.5k
Forks
3.2k
Avg merge
2d 3h
Merged PRs (30d)
123

Description

### What are you trying to do?

Currently, to utilize the API server proxy in auth mode, HTTPS has to be enabled on the tailnet. I've avoided doing so for my tailnet to keep machine names off the certificate transparency record, and I don't believe there are any security benefits from adding a TLS certificate here since the connection to the proxy would already be encrypted over Tailscale.

### How should we solve this?

Allow running the API server proxy over HTTP.

### What is the impact of not solving this?

I'm not using this feature at the moment because of this. I wouldn't mind enabling HTTPS on my tailnet as much if there was a way to restrict which machines could request certificates, but #5917 is still open.

### Anything else?

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.