Commit Graph

  • 5731869565 health: add an ETag to UnhealthyState for change detection James Sanderson 2025-07-28 11:38:34 +01:00
  • 5154bbb0b3 k8s-operator: adding session type to cast header (#16660) Tom Meadows 2025-07-28 11:15:14 +01:00
  • 6ed86a0251 cmd/k8s-operator: add IDP CRD for OpenID Connect identity provider k8s-idp Raj Singh 2025-07-27 12:19:02 -05:00
  • 995ab4a252 cmd/tsidp: This change enables tsidp to store its operational state in a Kubernetes secret, similar to how tsrecorder and the k8s-operator can. rajsinghtech/tsidp-kubestore Raj Singh 2025-07-25 22:26:59 -05:00
  • e300a00058 cmd/k8s-operator: Enhance DNS record handling for ProxyGroup egress services (#16181) Raj Singh 2025-07-25 19:45:37 -05:00
  • c720bb828c cmd/k8s-operator: Enhance DNS record handling for ProxyGroup egress services dns-proxygroup Raj Singh 2025-07-25 19:23:02 -05:00
  • 225aeda80f k8s-operator: handle multiple messages per WebSocket frame tomhjp/handle-multiple-messages-per-ws-frame Tom Proctor 2025-07-24 20:33:24 +01:00
  • 10d92c19c3 fix tomhjp/debug Tom Proctor 2025-07-25 19:10:53 +01:00
  • fdcff402fb VERSION.txt: this is v1.86.1 v1.86.1 Aaron Klotz 2025-07-25 11:54:40 -06:00
  • bfebf870ae cmd/tailscaled: update installSystemDaemonWindows to set the correct system service depndencies Aaron Klotz 2025-07-25 10:41:02 -06:00
  • 2914e31812 debug Tom Proctor 2025-07-25 13:55:25 +01:00
  • c572442548 cmd/tailscale: allow SSH to IPs or DNS names without MagicDNS (#16591) Danni Popova 2025-07-25 10:21:41 +01:00
  • 7e6cfa283b k8s-operator/api-proxy: always disable HTTP/2 for API server proxy tomhjp/disable-http2 Tom Proctor 2025-07-24 20:33:24 +01:00
  • 2a5d9c7269 VERSION.txt: this is v1.87.0 v1.87.0-pre Aaron Klotz 2025-07-24 12:20:28 -06:00
  • 758dfe7203 VERSION.txt: this is v1.86.0 v1.86.0 Aaron Klotz 2025-07-24 11:56:43 -06:00
  • 7d03fb1028 .github/Makefile/flake: update nix flake support mikeodr/update-flake Mike O'Driscoll 2025-07-23 11:41:05 -04:00
  • ae68c7865c cmd/tailscale/cli: add subcommand: tailscale debug location sfllaw/traffic-steering/debug-set-location Simon Law 2025-07-18 02:18:41 -07:00
  • c87f44b687 cmd/tailscale/cli: use DNS name instead of Location to hide Mullvad exit nodes from status output Nick Khyl 2025-07-22 18:57:24 -05:00
  • 179745b83e wgengine/magicsock: update discoInfo docs (#16638) Jordan Whited 2025-07-23 12:30:04 -07:00
  • 1ef8fbf470 ipn/ipnlocal: send Hostinfo after resolveExitNode for "auto:any" (#16632) Simon Law 2025-07-23 11:50:42 -07:00
  • f1f334b23d flake.lock/go.mod.sri: update flake version info (#16631) Mike O'Driscoll 2025-07-23 11:25:05 -04:00
  • 1ae6a97a73 cmd/tailscale/cli: add advertise command to advertise a node as service proxy to tailnet (#16620) KevinLiang10 2025-07-22 21:13:25 -04:00
  • 729d6532ff tailcfg: add Hostinfo.ExitNodeID to report the selected exit node (#16625) Simon Law 2025-07-22 13:54:28 -07:00
  • 19faaff95c cmd/tailscale/cli: revert key for web config for services to FQDN (#16627) KevinLiang10 2025-07-22 16:23:51 -04:00
  • 0de5e7b94f util/set: add IntSet (#16602) Joe Tsai 2025-07-22 09:22:17 -10:00
  • 4494705496 cmd/{k8s-proxy,containerboot,k8s-operator},kube: add health check and metrics endpoints for k8s-proxy (#16540) David Bond 2025-07-22 17:07:51 +01:00
  • 22a8e0ac50 cmd/{k8s-operator,k8s-proxy},kube: use consistent type for auth mode config (#16626) Tom Proctor 2025-07-22 14:46:38 +01:00
  • 6f7e78b10f cmd/tailscale/cli: make configure kubeconfig accept Tailscale Services (#16601) Tom Proctor 2025-07-22 10:07:09 +01:00
  • 8453170aa1 feature/relayserver: fix consumeEventbusTopics deadlock (#16618) Jordan Whited 2025-07-21 12:36:16 -07:00
  • c989824aac cmd/k8s-operator: Allow specifying cluster ips for nameservers (#16477) David Bond 2025-07-21 19:06:36 +01:00
  • 0d03a3746a feature/tpm: log errors on the initial info fetch (#16574) Andrew Lytvynov 2025-07-21 10:35:53 -07:00
  • 1677fb1905 wgengine/magicsock,all: allocate peer relay over disco instead of PeerAPI (#16603) Jordan Whited 2025-07-21 10:02:37 -07:00
  • 5d4e67fd93 net/dns/recursive: set EDNS on queries Brad Fitzpatrick 2025-07-21 08:36:43 -07:00
  • d6d29abbb6 tstest/integration/testcontrol: include peer CapMaps in MapResponses Raj Singh 2025-07-14 15:23:45 -05:00
  • f421907c38 all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572) Tom Proctor 2025-07-21 11:03:21 +01:00
  • 5adde9e3f3 cmd/tailscale/cli: remove advertise command (#16592) KevinLiang10 2025-07-18 15:06:09 -04:00
  • e01618a7c4 cmd/tailscale/cli: Add clear subcommand for serve services (#16509) KevinLiang10 2025-07-18 13:46:03 -04:00
  • 6c206fab58 feature/tpm: try opening /dev/tpmrm0 before /tmp/tpm0 on Linux (#16600) Andrew Lytvynov 2025-07-18 10:17:40 -07:00
  • d1ceb62e27 client/systray: look for ubuntu gnome Claus Lensbøl 2025-07-17 09:13:19 -04:00
  • 871f73d992 Kevin/add drain sub command for serve services (#16502) KevinLiang10 2025-07-18 10:55:43 -04:00
  • d334d9ba07 client/local,cmd/tailscale/cli,ipn/localapi: expose eventbus graph (#16597) Claus Lensbøl 2025-07-18 10:55:17 -04:00
  • 505334a395 cmd/{k8s-operator,k8s-proxy},kube: support reloading API server proxy mode tomhjp/k8s-proxy-auth-mode-reload Tom Proctor 2025-07-18 11:16:09 +01:00
  • 889a24bb9d make ProxyGroupReady condition for kube-apiserver dependent on Service readiness Tom Proctor 2025-07-17 19:23:53 +01:00
  • 85e68f50f5 update ProxyGroup CRD docs for allowed types Tom Proctor 2025-07-17 19:13:51 +01:00
  • d0714e01d1 typo/log field review comments Tom Proctor 2025-07-17 15:23:19 +01:00
  • 6c2e20d253 cmd/k8s-operator: make static check happy Tom Proctor 2025-07-17 12:29:57 +01:00
  • c923a77d1a cmd/k8s-operator: fix some missing cleanup + unit tests Tom Proctor 2025-07-17 12:23:58 +01:00
  • 93511be044 types/geo: add geo.Point and its associated units (#16583) Simon Law 2025-07-17 01:30:08 -07:00
  • b50ef3cdaf wgengine/magicsock: adjust peer relay path discovery interval jwhited/peer-relay-pathological-intervals Jordan Whited 2025-07-16 20:25:54 -07:00
  • f3b00b72fd wgengine/magicsock: don't reuse TCP conns across peer relay alloc reqs jwhited/relay-manager-alloc-req-no-keepalives Jordan Whited 2025-07-16 21:01:49 -07:00
  • e7238efafa cmd/tailscale/cli: Add service flag to serve command (#16191) KevinLiang10 2025-07-16 19:37:46 -04:00
  • 36aeacb297 wgengine/magicsock: add peer relay metrics (#16582) Jordan Whited 2025-07-16 14:34:05 -07:00
  • 04cb9d25e1 review comments Tom Proctor 2025-07-16 21:58:39 +01:00
  • 232d2b9c69 cmd/k8s-proxy: fix error on watch connection killed Tom Proctor 2025-07-16 21:38:38 +01:00
  • e84e58c567 ipn/ipnlocal: use rendezvous hashing to traffic-steer exit nodes Simon Law 2025-07-16 11:50:13 -07:00
  • 17c5116d46 ipn/ipnlocal: sort tailscale debug peer-relay-servers slice (#16579) Jordan Whited 2025-07-16 11:19:21 -07:00
  • 097c2bcf67 go.mod: bump wireguard-go (#16578) Jordan Whited 2025-07-16 11:04:32 -07:00
  • 3c6d17e6f1 cmd/tailscale/cli,ipn/ipnlocal,wgengine/magicsock: implement tailscale debug peer-relay-servers (#16577) Jordan Whited 2025-07-16 10:03:05 -07:00
  • bd3128752c cmd/natc,tsconsensus: add 'follower only' bootstrap option fran/nat-conn-follower-only-flag Fran Bull 2025-07-15 11:31:13 -07:00
  • 67514f5eb2 ssh/tailssh: fix path of "true" on Darwin (#16569) M. J. Fromberger 2025-07-16 08:08:59 -07:00
  • cb7a0b1dca net/udprelay: log socket read errors (#16573) Jordan Whited 2025-07-15 15:23:47 -07:00
  • 68652fcd27 all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup Tom Proctor 2025-07-14 23:21:38 +01:00
  • d65c0fd2d0 tailcfg,wgengine/magicsock: set peer relay CapVer (#16531) Jordan Whited 2025-07-15 12:29:07 -07:00
  • ffe8cc9442 .github: Bump github/codeql-action from 3.29.1 to 3.29.2 (#16480) dependabot[bot] 2025-07-15 09:54:00 -06:00
  • e0fcd596bf tailcfg: send health update if DisplayMessage URL changes James Sanderson 2025-07-14 17:54:56 +01:00
  • 7a3221177e .github: Bump slackapi/slack-github-action from 2.1.0 to 2.1.1 (#16553) dependabot[bot] 2025-07-15 08:33:22 -06:00
  • 205f822372 ipn/ipnlocal: check if suggested exit node is online Simon Law 2025-07-14 19:01:02 -07:00
  • bfb344905f ipn/ipnlocal: modernize nm.Peers with AppendMatchingPeers Simon Law 2025-07-14 18:51:55 -07:00
  • b63f8a457d wgengine/magicsock: prioritize trusted peer relay paths over untrusted (#16559) Jordan Whited 2025-07-14 15:09:31 -07:00
  • f338c4074d util/jsonutil: remove unused package (#16563) Joe Tsai 2025-07-14 11:57:54 -10:00
  • 6248c1ceca all: use "github.com/go-json-experiment/json/v1" over "encoding/json" dsnet/jsonv1in2 Joe Tsai 2025-07-14 14:41:16 -07:00
  • 9f25b7dcca Temp for debugging mpminardi/policy-debugging Mario Minardi 2025-07-14 12:54:31 -06:00
  • fc5050048e wgengine/magicsock: don't acquire Conn.mu in udpRelayEndpointReady (#16557) Jordan Whited 2025-07-14 10:42:56 -07:00
  • fe46f33885 cmd/{k8s-operator,k8s-proxy},kube/k8s-proxy: add static endpoints for kube-apiserver type ProxyGroups (#16523) Tom Meadows 2025-07-14 15:39:39 +01:00
  • bcaea4f245 k8s-operator,sessionrecording: fixing race condition between resize (#16454) Tom Meadows 2025-07-14 15:17:20 +01:00
  • f23e4279c4 types/lazy: add lazy.GMap: a map of lazily computed GValues (#16532) Simon Law 2025-07-13 05:47:56 -07:00
  • 24062e33d1 net/udprelay: fix peer relay server deadlock (#16542) Jordan Whited 2025-07-11 17:12:23 -07:00
  • 39bf84d1c7 cmd/tsidp: set hostinfo.App in tsnet mode (#16544) Andrew Lytvynov 2025-07-11 16:01:15 -07:00
  • 30da2e1c32 cmd/tailscale/cli: add "configure jetkvm" subcommand Brad Fitzpatrick 2025-07-11 08:51:02 -07:00
  • 04e8d21b0b go.mod: bump wg-go to fix keepalive detection (#16535) Jordan Whited 2025-07-10 22:21:08 -07:00
  • c18ba4470b ipn/ipnlocal: add traffic steering support to exit-node suggestions (#16527) Simon Law 2025-07-10 22:15:55 -07:00
  • bd29a1c8c1 feature/relayserver,wgengine/magicsock: remove WIP gating of peer relay (#16533) Jordan Whited 2025-07-10 18:52:01 -07:00
  • 5f678b9bec docs/windows/policy: add ExitNode.AllowOverride as an option to ExitNodeID policy Nick Khyl 2025-07-09 17:41:55 -05:00
  • fed72e2aa9 cmd/tailscale, ipn/ipnstate, wgengine/magicsock: update ping output for peer relay (#16515) Dylan Bargatze 2025-07-10 18:22:25 -04:00
  • fbc6a9ec5a all: detect JetKVM and specialize a handful of things for it Brad Fitzpatrick 2025-07-10 11:14:08 -07:00
  • bebc796e6c ipn/ipnlocal: add traffic-steering nodecap (#16529) Simon Law 2025-07-10 12:45:05 -07:00
  • f9bfd8118a wgengine/magicsock: resolve epAddr collisions across peer relay conns (#16526) Jordan Whited 2025-07-10 12:41:14 -07:00
  • d0cafc0a67 cmd/{k8s-operator,k8s-proxy}: apply accept-routes configuration to k8s-proxy (#16522) David Bond 2025-07-10 15:53:01 +01:00
  • 2b665c370c cmd/{k8s-operator,k8s-proxy}: allow setting login server url (#16504) David Bond 2025-07-10 14:33:30 +01:00
  • cf0460b9da cmd/k8s-operator: allow letsencrypt staging on k8s proxies (#16521) David Bond 2025-07-10 14:33:13 +01:00
  • fbc4c34cf7 ipn/localapi: do not break client on event marshalling errors (#16503) Claus Lensbøl 2025-07-10 03:04:29 -04:00
  • 6a0fad1e10 wgengine/magicsock: don't peer relay if NodeAttrOnlyTCP443 is set (#16517) Jordan Whited 2025-07-09 20:02:00 -07:00
  • f3813e3e73 wgengine/magicsock: resolve [epAddr] collisions across peer relay conns jwhited/verify-peer-periodically Jordan Whited 2025-07-09 17:04:57 -07:00
  • ae8641735d cmd/tailscale/cli,ipn/ipnstate,wgengine/magicsock: label peer-relay (#16510) Jordan Whited 2025-07-09 15:17:51 -07:00
  • d40b25326c tailcfg, wgengine/magicsock: disable all UDP relay usage if disable-relay-client is set (#16492) Dylan Bargatze 2025-07-09 18:06:58 -04:00
  • ff1803158a ipn/ipnlocal: change order of exit node refresh and netmap update so that clients receive the new netmap first Nick Khyl 2025-07-09 13:01:32 -05:00
  • 21a4058ec7 ipn/ipnlocal: add test to verify handling of unknown auto exit node expressions Nick Khyl 2025-07-08 18:35:32 -05:00
  • c5fdf9e1db cmd/tailscale/cli: add support for tailscale {up,set} --exit-node=auto:any Nick Khyl 2025-07-09 12:07:44 -05:00
  • cc2f4ac921 ipn: move ParseAutoExitNodeID from ipn/ipnlocal to ipn Nick Khyl 2025-07-09 11:59:57 -05:00
  • 008a238acd wgengine/magicsock: support self as candidate peer relay (#16499) Jordan Whited 2025-07-09 09:16:29 -07:00