Commit Graph

  • bee8cb1041 cmd/{k8s-operator,k8s-proxy}: support new ProxyGroup type kube-apiserver tomhjp/k8s-proxy-3 Tom Proctor 2025-06-04 15:28:43 +01:00
  • 13ee285675 health: show DisplayMessage actions in 'tailscale status' James Sanderson 2025-06-04 12:10:15 +01:00
  • 5fde183754 ipn: add watch opt to include actions in health messages James Sanderson 2025-06-03 15:09:34 +01:00
  • 1635ccca27 ssh/tailssh: display more useful error messages when authentication fails Percy Wegmann 2025-05-29 09:11:31 -05:00
  • 5f0e139012 cmd/tsidp: add Docker image building support (#16078) Raj Singh 2025-06-03 12:52:00 -04:00
  • cc988596a2 posture: propagate serial number from MDM on Android Anton Tolchanov 2025-05-30 13:03:46 +01:00
  • 3464cf52bd cmd/tailscale/cli: Add clear subcommand to serve kevin/add_services_flag_to_tailscale_serve_and_enrich_output KevinLiang10 2025-06-03 10:51:43 -04:00
  • f064f3137c cmd/tailscale/cli: Remove advertise command and add drain to serve KevinLiang10 2025-06-03 10:49:10 -04:00
  • 8a3afa5963 ipn/ipnlocal: fix deadlock when filtering DisplayMessage URLs James Sanderson 2025-06-02 15:52:16 +01:00
  • 5f35143d83 go.mod,wgengine/magicsock: update wireguard-go (#16148) Jordan Whited 2025-06-02 13:22:28 -07:00
  • 32d109548f ipn/ipnlocal: Update hostinfo to control on service config change KevinLiang10 2025-05-30 17:30:05 -04:00
  • 92c0bf5af2 cmd/tailscale/cli: Allow tailscale serve serving services from cli KevinLiang10 2025-03-16 22:18:04 -04:00
  • c9a5d638e9 tsconsensus: enable writing state to disk Fran Bull 2025-05-27 08:06:45 -07:00
  • 84aa7ff3bb syncs: fix AtomicValue.CompareAndSwap (#16137) Joe Tsai 2025-05-30 08:06:16 -10:00
  • 11e83f9da5 controlclient,health,ipnlocal,tailcfg: add DisplayMessage support James Sanderson 2025-05-07 17:01:40 +01:00
  • f1b8c4a4d3 cmd/containerboot: allow setting --accept-dns via TS_EXTRA_ARGS again (#16129) (#16140) Irbe Krumina 2025-05-30 14:21:58 +01:00
  • 5b670eb3a5 cmd/containerboot: allow setting --accept-dns via TS_EXTRA_ARGS again (#16129) Irbe Krumina 2025-05-30 11:30:03 +01:00
  • ef49e75b10 util/set: add SmallSet.SoleElement, fix bug, add more tests Brad Fitzpatrick 2025-05-29 12:40:29 -07:00
  • 401d6c0cfa go.mod: bump golang.org/x deps Brad Fitzpatrick 2025-05-29 12:05:41 -07:00
  • 191afd3390 net/tshttpproxy: fix WDAP/PAC proxy detection on Win10 1607 and earlier Nick Khyl 2025-05-29 10:41:23 -05:00
  • 4cccd15eeb ipn/ipnlocal: fix data race when accessing b.appConnector Nick Khyl 2025-05-29 13:51:46 -05:00
  • dca4036a20 util/set: add SmallSet Brad Fitzpatrick 2025-05-27 13:31:39 -07:00
  • 72ec2811bf VERSION.txt: this is v1.84.1 v1.84.1 Jonathan Nobels 2025-05-29 13:40:49 -04:00
  • b0d35975c0 go.toolchain.rev: bump to 1.24.3 (#16060) Andrew Lytvynov 2025-05-28 17:54:04 -07:00
  • 36df320e6a tsnet: remove an expired configuration-path migration step (#16120) M. J. Fromberger 2025-05-28 14:12:24 -07:00
  • c417248c1f net/dns: cache dns.Config for reuse when compileConfig fails (#16059) Jonathan Nobels 2025-05-28 15:43:12 -04:00
  • 5e54819cee net/dns: cache dns.Config for reuse when compileConfig fails (#16059) Jonathan Nobels 2025-05-28 15:43:12 -04:00
  • ffc8ec289b wgengine/magicsock: implement relayManager endpoint probing (#16029) Jordan Whited 2025-05-28 10:45:59 -07:00
  • 914acdc8b4 ipn: set RouteAll=true by default for new accounts on iOS and Android (#16110) Jonathan Nobels 2025-05-28 10:08:06 -04:00
  • 842df37803 ipn: set RouteAll=true by default for new accounts on iOS and Android (#16110) Jonathan Nobels 2025-05-28 10:08:06 -04:00
  • e5d6093ded run gofmt exclude_int Lee Briggs 2025-05-27 09:07:33 -07:00
  • f65aa3d8e3 Change name of interface exclude mechanism Lee Briggs 2025-05-27 08:24:16 -07:00
  • 4b59f1dfe6 .github/workflows: use Ubuntu 24.04 images (#16097) Irbe Krumina 2025-05-27 16:03:45 +01:00
  • c7e33aa4dd tstest/integration/vms,.github/workflows: bump Ubuntu and NixOS for VM tests + cleanup irbekrm/cleanup_vmstest Irbe Krumina 2025-05-27 11:00:52 +01:00
  • cd49faa123 feature/capture: fix wireshark decoding and add new disco frame types (#16089) Mike O'Driscoll 2025-05-26 10:23:30 -04:00
  • 09582bdc00 cmd/tsidp: add web UI for managing OIDC clients (#16068) Raj Singh 2025-05-24 18:16:29 -04:00
  • 4980869977 cmd/tsidp: Fix sending string for refresh_token Tim Klocke 2025-05-24 18:05:57 +02:00
  • 4a11514db5 ipn/ipnlocal: improve dohQuery error to suggest ?dns= and ?q= (#16056) Zach Buchheit 2025-05-23 14:17:28 -07:00
  • 00a7dd180a cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (#16058) Irbe Krumina 2025-05-23 12:23:58 +01:00
  • 7a5af6e6e7 ssh/tailssh: exclude Android from Linux build tags Brad Fitzpatrick 2025-05-21 20:30:55 -07:00
  • a05924a9e5 client/web: add Sec-Fetch-Site CSRF protection (#16046) Patrick O'Doherty 2025-05-22 12:26:02 -07:00
  • 3ee4c60ff0 cmd/derper: fix mesh auth for DERP servers (#16061) Simon Law 2025-05-22 12:14:16 -07:00
  • 05ecda9855 cmd/k8s-operator, k8s-operator: support direct connections on ProxyGroups irbekrm/pretendpoints chaosinthecrd 2025-05-22 16:22:48 +01:00
  • 3ffa7c642f Revert "control/controlclient,health,tailcfg: refactor control health message…" revert-15839-zofrex/refactor-control-health Paul Scott 2025-05-22 15:06:16 +01:00
  • aa8bc23c49 control/controlclient,health,tailcfg: refactor control health messages (#15839) James 'zofrex' Sanderson 2025-05-22 13:40:32 +01:00
  • 980ab4244d VERSION.txt: this is v1.85.0 (#16042) v1.85.0-pre Jonathan Nobels 2025-05-21 15:27:32 -04:00
  • 0b36774ff9 VERSION.txt: this is v1.84.0 (#16041) v1.84.0 Jonathan Nobels 2025-05-21 15:10:03 -04:00
  • 0bab16448e ipn/store: remove a layer of indirection for registering stores (#15986) Andrew Lytvynov 2025-05-21 08:47:23 -07:00
  • 5a8b99e977 ipn,ipnlocal,taildrop: use SAF for Android files (#15976) kari-ts 2025-05-20 15:30:19 -07:00
  • 70b6e8ca98 wgengine/magicsock: fix outdated heartbeat comment (#16023) Jordan Whited 2025-05-20 08:46:37 -07:00
  • 118206ab79 prober: update header check test (#15993) Mike O'Driscoll 2025-05-20 09:45:12 -04:00
  • 9b88169de7 cmd/{k8s-operator,k8s-proxy},k8s-operator,kube: add new k8s-proxy command Tom Proctor 2025-05-01 21:31:17 +01:00
  • c4fb380f3c cmd/k8s-operator: fix Tailscale Service API errors check (#16020) Irbe Krumina 2025-05-20 11:30:45 +01:00
  • 3cc80cce6a wgengine/magicsock: introduce virtualNetworkID type (#16021) Jordan Whited 2025-05-19 19:14:08 -07:00
  • 30a89ad378 ipn/ipnlocal: make GetExt work earlier, before extension init Brad Fitzpatrick 2025-05-19 13:02:20 -07:00
  • 54970054a6 cmd/tailscale/cli: suggest using "tailscale set", not "up", to set operator Brad Fitzpatrick 2025-05-19 07:56:03 -07:00
  • 87a4f17883 wgengine/magicsock: fix pong handling 'EndpointChange' reporting (#16018) Jordan Whited 2025-05-19 11:42:13 -07:00
  • 8009ad74a3 cmd/derper, net/tlsdial: fix client's self-signed cert validation Brad Fitzpatrick 2025-05-19 08:39:55 -07:00
  • b5770c81c9 cmd/k8s-operator: rename VIPService -> Tailscale Service in L3 HA Service Reconciler (#16014) Tom Meadows 2025-05-19 16:33:34 +01:00
  • 95dcd133dd cmd/k8s-operator: warn if HA Service is applied, but VIPService feature flag is not enabled (#16013) Tom Meadows 2025-05-19 14:34:44 +01:00
  • e35a3ef845 cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (#15961) Tom Meadows 2025-05-19 12:58:32 +01:00
  • c806444127 {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) Tom Proctor 2025-05-19 11:35:05 +01:00
  • d876a44d68 cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897) Irbe Krumina 2025-05-19 10:42:03 +01:00
  • 331b64bcaa wgengine/magicsock: add missing logf arg (#15995) Jordan Whited 2025-05-16 16:12:59 -07:00
  • d5003e9664 wgengine/magicsock: implement relayManager handshaking (#15977) Jordan Whited 2025-05-16 13:51:40 -07:00
  • 8638ca8843 prober: correct content-type response (#15989) Mike O'Driscoll 2025-05-16 12:51:07 -04:00
  • 9217c49395 cmd/proxy-to-grafana: strip X-Webauth* headers from all requests (#15985) Patrick O'Doherty 2025-05-15 14:26:19 -07:00
  • 7fe27496c8 cmd/k8s-operator: warn if HA Service is applied, but VIPService feature flag is not enabled (#16013) Tom Meadows 2025-05-19 14:34:44 +01:00
  • df8d51023e cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (#15961) Tom Meadows 2025-05-19 12:58:32 +01:00
  • d89aa29081 {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) Tom Proctor 2025-05-19 11:35:05 +01:00
  • 6b97e615d6 cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897) Irbe Krumina 2025-05-19 10:42:03 +01:00
  • 469fabd8de wgengine/magicsock: add missing logf arg (#15995) Jordan Whited 2025-05-16 16:12:59 -07:00
  • 6de4a021bb wgengine/magicsock: implement relayManager handshaking (#15977) Jordan Whited 2025-05-16 13:51:40 -07:00
  • 9c52856af6 prober: correct content-type response (#15989) Mike O'Driscoll 2025-05-16 12:51:07 -04:00
  • 336b3b7df0 cmd/proxy-to-grafana: strip X-Webauth* headers from all requests (#15985) Patrick O'Doherty 2025-05-15 14:26:19 -07:00
  • 9e76b22414 WIP Irbe Krumina 2025-05-15 16:11:48 +01:00
  • e8ba16db54 ipn,ipnlocal,taildrop: use SAF for Android files Create FileOps for calling platform-specific file operations such as SAF APIs in Taildrop Update taildrop.PutFile to support both traditional and SAF modes kari/taildropsaf2 Nick Khyl 2025-05-09 17:50:33 -05:00
  • 824985afe1 feature/taildrop,ipn/ipn{ext,local}: initialize taildrop for initial profile Nick Khyl 2025-05-14 11:57:01 -05:00
  • 49a7685af9 feature/taildrop: add integration test variant with profiles that exist Brad Fitzpatrick 2025-05-14 11:17:15 -07:00
  • abe04bfa78 cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet without the feature enabled (#15931) Irbe Krumina 2025-05-14 18:25:08 +01:00
  • fa97309316 wgengine/magicsock: start to shape relayManager handshaking jwhited/relay-handshake Jordan Whited 2025-05-13 14:56:08 -07:00
  • f2758c49a7 k8s-operator: adding final tests irbekrm/ingress_services chaosinthecrd 2025-05-13 14:25:02 +01:00
  • fccba5a2f1 prober: fix test logic (#15952) Mike O'Driscoll 2025-05-13 09:19:18 -04:00
  • 65e005ccaa ipn/ipnlocal: attach Tailnet Lock status to bugreports Anton Tolchanov 2025-05-12 19:43:25 +01:00
  • 0b2a9500a7 ipn/ipnlocal: group LocalBackend changes, remove unnecessary check knyar/tnlocktest Anton Tolchanov 2025-05-13 11:07:12 +01:00
  • 1014beeb8d Set a debug knob for excluding interfaces Lee Briggs 2025-05-12 20:40:43 -07:00
  • ffb1dda245 ipn/ipnlocal,wgengine: move (*tsdial.Dialer).SetRoutes() calls from LocalBackend to userspaceEngine Nick Khyl 2025-05-12 18:35:12 -05:00
  • d303570ab7 docs/commit-messages.md: explain #cleanup commits (#15933) Simon Law 2025-05-12 16:23:36 -07:00
  • 7f4aaed1d5 cmd/derpprobe: exit with non-zero status if --once fails (#15926) Simon Law 2025-05-12 12:53:55 -07:00
  • 13e91f4a2f docs/windows/policy: add OnboardingFlow policy to ADMX file Aaron Klotz 2024-11-18 15:44:06 -07:00
  • ddbcbbbe52 k8s-operator: adding tests (still need multicluster and backwards compat w/ svc chaosinthecrd 2025-05-12 17:41:40 +01:00
  • fb188c5b53 net/dns,docs/windows/policy,util/syspolicy: register Tailscale IP addresses in AD DNS if required by policy Nick Khyl 2025-05-08 18:38:48 -05:00
  • 2c16fcaa06 util/linuxfw,wgengine/router: add new netfilter rules for HA ingresses (#15896) Irbe Krumina 2025-05-12 17:26:23 +01:00
  • d6dd74fe0e net/udprelay{/endpoint}: move ServerEndpoint tests (#15949) Jordan Whited 2025-05-12 09:25:59 -07:00
  • b02de31563 prober: update cert check for prober (#15919) Mike O'Driscoll 2025-05-12 10:25:31 -04:00
  • 5dd21b798a k8s-operator: adding endpointslice read to operator clusterrole chaosinthecrd 2025-05-12 11:29:41 +01:00
  • b70c0c50fd ssh/tailssh: fix data race during execution of test Nick Khyl 2025-05-09 23:12:00 -05:00
  • 4c09ea6c24 ipn/ipnlocal: call authReconfig once per cc status update nickkhyl/authreconfig-once Nick Khyl 2025-05-09 20:19:36 -05:00
  • 565ebbdeb8 ipn/ipnlocal: move nodeBackend methods from local.go to node_backend.go Nick Khyl 2025-05-09 17:50:33 -05:00
  • f0a27066c4 ipn/ipn{server,test}: extract the LocalAPI test client and server into ipntest Nick Khyl 2025-04-16 16:32:10 -05:00