Commit Graph

  • 27fa2ad868 cmd/k8s-operator: don't require generation for Available condition (#16497) Tom Proctor 2025-07-09 09:37:45 +01:00
  • 4dfed6b146 cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) Tom Proctor 2025-07-09 09:21:56 +01:00
  • 90bf0a97b3 cmd/k8s-operator/deploy: clarify helm install notes (#16449) Tom Proctor 2025-07-09 09:13:11 +01:00
  • bad17a1bfa cmd/tailscale: format empty cities and countries as hyphens (#16495) Simon Law 2025-07-08 22:14:18 -07:00
  • a60e0caf6a wgengine/magicsock: remove conn.InitiationAwareEndpoint TODO (#16498) Jordan Whited 2025-07-08 19:37:09 -07:00
  • ab7489fb13 cmd/{k8s-operator,k8s-proxy},k8s-operator,kube: create Tailscale Service for kube-apiserver ProxyGroup tomhjp/k8s-proxy-svc Tom Proctor 2025-06-17 15:44:51 +01:00
  • 740b77df59 ipn/ipnlocal,util/syspolicy: add support for ExitNode.AllowOverride policy setting Nick Khyl 2025-07-08 16:08:28 -05:00
  • 2c630e126b ipn/ipnlocal: make applySysPolicy a method on LocalBackend Nick Khyl 2025-07-07 19:05:41 -05:00
  • 9bf99741dd ipn/ipnlocal: refactor resolveExitNodeInPrefsLocked, setExitNodeID and resolveExitNodeIP Nick Khyl 2025-07-07 19:02:10 -05:00
  • 864e3ed756 cmd/k8s-operator: fix validation bugs caught by tests Tom Proctor 2025-07-08 21:54:39 +01:00
  • e6394e2713 {,cmd/}k8s-operator: improve docs and validation for image Tom Proctor 2025-07-08 21:41:38 +01:00
  • 1fe82d6ef5 cmd/tailscale/cli,ipn/ipnlocal: restrict logout when AlwaysOn mode is enabled Nick Khyl 2025-07-08 14:37:13 -05:00
  • 5b0074729d go.mod,wgengine/magicsock: implement conn.InitiationAwareEndpoint (#16486) Jordan Whited 2025-07-08 09:45:18 -07:00
  • dc1a5cd004 cmd/k8s-operator: fix unit tests Tom Proctor 2025-07-08 12:46:50 +01:00
  • 87da7b8667 {,cmd/}k8s-operator: review comments and self-review Tom Proctor 2025-07-08 09:49:43 +01:00
  • 47f431b656 net/udprelay: fix relaying between mixed address family sockets (#16485) Jordan Whited 2025-07-07 19:46:20 -07:00
  • ea4018b757 ipn/ipnlocal: fix missing defer in testExtension.Shutdown Nick Khyl 2025-07-07 17:21:21 -05:00
  • f1c7b463cd ipn/{ipnauth,ipnlocal,localapi}: make EditPrefs return an error if changing exit node is restricted by policy Nick Khyl 2025-07-07 17:04:07 -05:00
  • a6f6478129 util/syspolicy: add HasAnyOf to check if any specified policy settings are configured Nick Khyl 2025-07-07 11:50:59 -05:00
  • cb7b49941e ipn/ipnlocal: add (*LocalBackend).reconcilePrefsLocked Nick Khyl 2025-07-03 19:37:56 -05:00
  • 381fdcc3f1 ipn/ipnlocal,util/syspolicy/source: retain existing exit node when using auto exit node, if it's allowed by policy Nick Khyl 2025-07-03 20:32:30 -05:00
  • 4c1c0bac8d ipn/ipnlocal: plumb nodeBackend into suggestExitNode to support delta updates, such as online status changes Nick Khyl 2025-07-03 14:32:28 -05:00
  • 3e01652e4d ipn/ipnlocal: add (*LocalBackend).RefreshExitNode Nick Khyl 2025-07-03 14:25:33 -05:00
  • 04d24cdbd4 wgengine/netstack: correctly proxy half-closed TCP connections Naman Sood 2025-07-07 15:36:16 -04:00
  • a84d58015c wgengine/magicsock: fix lazyEndpoint DstIP() vs SrcIP() (#16453) Jordan Whited 2025-07-07 10:06:38 -07:00
  • 3b32cc7586 wgengine/magicsock: simplify Geneve-encapsulated disco.Ping handling (#16448) Jordan Whited 2025-07-07 09:38:10 -07:00
  • 540eb05638 wgengine/magicsock: make Conn.Send() lazyEndpoint aware (#16465) Jordan Whited 2025-07-07 08:45:13 -07:00
  • e0638b3b44 cmd/k8s-operator: maybe fix CI? tomhjp/authkey-reissue Tom Proctor 2025-07-07 13:11:23 +01:00
  • 8250af287c {,cmd/}k8s-operator: simplify logic, tighten error handling Tom Proctor 2025-07-07 13:01:22 +01:00
  • 84eac7b8de cmd/k8s-operator: Allow custom ingress class names (#16472) David Bond 2025-07-07 12:12:59 +01:00
  • ca91bcf6ef cmd/containerboot: logic/fmt comments Tom Proctor 2025-07-07 11:52:42 +01:00
  • 68b56d4b48 {,cmd/}k8s-operator: minor nits self-review Tom Proctor 2025-07-07 11:09:09 +01:00
  • 0e605c53c8 cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type Tom Proctor 2025-06-26 09:07:43 +01:00
  • 4f3355e499 .github: Bump github/codeql-action from 3.29.0 to 3.29.1 (#16423) dependabot[bot] 2025-07-06 22:25:18 -06:00
  • 079134d3c0 cmd/k8s-operator: always set ProxyGroup status conditions (#16429) Tom Proctor 2025-07-07 00:40:56 +01:00
  • 92a114c66d tailcfg, feature/relayserver, wgengine/magicsock: invert UDP relay server nodeAttrs (#16444) Dylan Bargatze 2025-07-04 12:48:38 -04:00
  • 639fed6856 Dockerfile,build_docker.sh: add a note on how to build local images (#16471) Irbe Krumina 2025-07-04 16:06:22 +01:00
  • c46145b99e cmd/k8s-operator: Move login server value to top-level (#16470) David Bond 2025-07-04 12:19:23 +01:00
  • a8055b5f40 cmd/tailscale/cli,ipn,ipn/ipnlocal: add AutoExitNode preference for automatic exit node selection Nick Khyl 2025-07-03 12:21:29 -05:00
  • 0098822981 ipn/ipnlocal: update suggestExitNode to skip offline candidates and fix TestSetControlClientStatusAutoExitNode Nick Khyl 2025-07-03 11:51:27 -05:00
  • 6ecc25b26a ipn/ipnlocal: skip TestUpdateNetmapDeltaAutoExitNode Nick Khyl 2025-07-03 11:50:27 -05:00
  • 56d772bd63 ipn/ipnlocal: simplify pickNewAutoExitNode Nick Khyl 2025-07-02 19:16:39 -05:00
  • 1a2185b1ee ipn/ipnlocal: rename setAutoExitNodeIDLockedOnEntry to pickNewAutoExitNode; drop old function Nick Khyl 2025-07-02 19:06:54 -05:00
  • 5dc11d50f7 cmd/k8s-operator: Set login server on tsrecorder nodes (#16443) David Bond 2025-07-03 15:53:35 +01:00
  • 969927c47c cmd/{containerboot,k8s-operator}: reissue auth keys for broken proxies Tom Proctor 2025-07-03 13:48:48 +01:00
  • 3a4b439c62 feature/relayserver,net/udprelay: add IPv6 support (#16442) Jordan Whited 2025-07-02 20:38:39 -07:00
  • cf253057f7 wgengine/magicsock: always use Cryptokey Routing identification jwhited/peer-verify-every-packet-batch Jordan Whited 2025-07-02 19:31:03 -07:00
  • 77d19604f4 derp/derphttp: fix DERP TLS client server name inclusion in URL form James Tucker 2025-07-02 14:32:21 -07:00
  • eb03d42fe6 cmd/k8s-operator: Allow configuration of login server (#16432) David Bond 2025-07-02 21:42:31 +01:00
  • f9e7131772 wgengine/magicsock: make lazyEndpoint load bearing for UDP relay (#16435) Jordan Whited 2025-07-02 13:27:30 -07:00
  • 172e26b3e3 tailcfg: report StateEncrypted in Hostinfo (#16434) Andrew Lytvynov 2025-07-02 10:52:00 -07:00
  • d2edf7133a wgengine/magicsock: remove references to rucPtr (#16441) Jordan Whited 2025-07-02 09:23:54 -07:00
  • 965afe56dc all: update github.com/go-json-experiment/json dsnet/update-jsonv2 Joe Tsai 2025-07-01 17:30:38 -07:00
  • d15b2312c4 tailcfg: add CapabilityOwner (#16426) kari-ts 2025-07-01 09:28:48 -07:00
  • 454d856be8 drive,ipn/ipnlocal: calculate peer taildrive URLs on-demand Percy Wegmann 2025-07-01 09:03:54 -05:00
  • 6a9bf9172b ipn/ipnlocal: add verbose Taildrive logging on client side Percy Wegmann 2025-06-30 13:43:16 -05:00
  • 47e77565c6 wgengine/magicsock: avoid handshaking relay endpoints that are trusted (#16412) Jordan Whited 2025-06-30 12:12:57 -07:00
  • 2fc247573b cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363) Tom Meadows 2025-06-30 12:08:35 +01:00
  • f85e4bcb32 client/systray: replace counter metric with gauge Will Norris 2025-06-27 13:11:59 -04:00
  • ee8c3560ef tailcfg: format integer IDs as decimal consistently Brad Fitzpatrick 2025-06-23 09:02:03 -07:00
  • 3dc694b4f1 wgengine/magicsock: clear UDP relay bestAddr's on disco ping timeout (#16410) Jordan Whited 2025-06-27 19:11:59 -07:00
  • 544aee9d08 tsidp: update README to refer to community projects (#16411) Simon Law 2025-06-27 17:30:43 -07:00
  • 76b9afb54d ipn/store: make StateStore.All optional (#16409) Andrew Lytvynov 2025-06-27 15:14:18 -07:00
  • b4eb836c80 cmd/tailscale/cli: change parameter of IsTCPForwardingOnPort kevin/packet_to_vipService_by_ip_instead_of_host KevinLiang10 2025-06-27 17:56:09 -04:00
  • 0a64e86a0d wgengine/magicsock: move UDP relay path discovery to heartbeat() (#16407) Jordan Whited 2025-06-27 13:56:55 -07:00
  • d8eeceabf8 fix the out put error caused by shortend host KevinLiang10 2025-06-27 16:43:48 -04:00
  • b6b135f0c1 ipn/ipnlocal: replace the key to webHandler for services KevinLiang10 2025-06-27 14:32:48 -04:00
  • 711698f5a9 cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328) Tom Proctor 2025-06-27 18:10:04 +01:00
  • df38599715 build(deps): bump github.com/go-viper/mapstructure/v2 dependabot/go_modules/github.com/go-viper/mapstructure/v2-2.3.0 dependabot[bot] 2025-06-27 16:50:12 +00:00
  • f81baa2d56 cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) Tom Meadows 2025-06-27 17:12:14 +01:00
  • 53f67c4396 util/eventbus: fix docstrings (#16401) Claus Lensbøl 2025-06-27 10:03:56 -04:00
  • df786be14d cmd/tailscale: use text format for TKA head Kristoffer Dalby 2025-06-27 11:54:01 +02:00
  • 4a7b8afabf cmd/tailscale: add tlpub: prefix to lock log output Kristoffer Dalby 2025-06-20 13:21:31 +02:00
  • b32a01b2dc disco,net/udprelay,wgengine/magicsock: support relay re-binding (#16388) Jordan Whited 2025-06-26 19:30:14 -07:00
  • b2bf7e988e wgengine/magicsock: add envknob to toggle UDP relay feature (#16396) Jordan Whited 2025-06-26 18:39:47 -07:00
  • 6feb3c35cb ipn/store: automatically migrate between plaintext and encrypted state (#16318) Andrew Lytvynov 2025-06-26 17:09:13 -07:00
  • a6634ce2c4 cmd/tailscale/cli: flip bool condition KevinLiang10 2025-06-26 17:25:03 -04:00
  • 71fe9a9860 cmd/tailscale/cli: adjust parameter order and update output message KevinLiang10 2025-06-26 17:07:51 -04:00
  • d40755be85 replace all assemble of host name for service with strings.Join KevinLiang10 2025-06-26 15:38:18 -04:00
  • 8d861680d2 replace IsServiceName with tailcfg.AsServiceName KevinLiang10 2025-06-26 15:30:31 -04:00
  • ec35e6c1d8 some code simplification and add asServiceName KevinLiang10 2025-06-26 13:31:34 -04:00
  • 59c86c90cd replace FindServiceConfig with map lookup KevinLiang10 2025-06-25 14:09:50 -04:00
  • 32cc03db20 change the cli input flag variable type KevinLiang10 2025-06-25 13:28:06 -04:00
  • 95d9777d4e add dnsName in error message KevinLiang10 2025-06-12 10:22:05 -04:00
  • 746ee23203 cmd/tailscale/cli: fix comment KevinLiang10 2025-06-11 17:02:51 -04:00
  • 37fbba047b cmd/tailscale/cli: Add a test for addServiceToPrefs KevinLiang10 2025-06-04 13:52:28 -04:00
  • 1ec61b9992 cmd/tailscale/cli: fix ai comments and fix a test KevinLiang10 2025-06-04 13:32:18 -04:00
  • b8f2e27675 cmd/tailscale/cli: Add service flag to serve command KevinLiang10 2025-06-04 12:09:46 -04:00
  • d2c1ed22c3 .github/workflows: replace tibdex with official GitHub Action (#16385) Simon Law 2025-06-26 13:37:21 -07:00
  • 5197065b9d .github/workflows: replace tibdex with official GitHub Action sfllaw/replace-tibdex-actions Simon Law 2025-06-24 13:57:46 -07:00
  • 99aaa6e92c ipn/ipnlocal: update PeerByID to return SelfNode and rename it to NodeByID (#16096) JerryYan 2025-06-27 00:43:48 +08:00
  • 47dff33eac tool/gocross: remove GOROOT to ensure correct toolchain use James Tucker 2025-06-25 18:07:49 -07:00
  • 7648989bc5 VERSION.txt: this is v1.84.3 (#16393) v1.84.3 release-branch/1.84 Irbe Krumina 2025-06-26 17:26:38 +01:00
  • 88df3007d8 ipn/ipnlocal: Update hostinfo to control on service config change (#16146) (#16358) Irbe Krumina 2025-06-26 17:19:25 +01:00
  • aa106c92a4 .github/workflows: request @tailscale/dataplane review DERP changes (#16372) Simon Law 2025-06-25 21:30:44 -07:00
  • 51d00e135b wgengine/magicsock: fix relayManager alloc work cleanup (#16387) Jordan Whited 2025-06-25 19:13:02 -07:00
  • 37eca1785c net/netmon: add tests for the events over the eventbus (#16382) Claus Lensbøl 2025-06-25 14:44:01 -04:00
  • 35b11e7be5 envknob/featureknob: restore SSH and exit-node capability for Home Assistant (#16263) Laszlo Magyar 2025-06-25 20:26:11 +03:00
  • b75fe9eeca cmd/k8s-operator: Add NOTES.txt to Helm chart (#16364) David Bond 2025-06-25 14:14:17 +01:00
  • f2f1236ad4 util/eventbus: add test helpers to simplify testing events (#16294) Claus Lensbøl 2025-06-25 09:00:34 -04:00