Raj Singh 995ab4a252 cmd/tsidp: This change enables tsidp to store its operational state in a Kubernetes secret, similar to how tsrecorder and the k8s-operator can. ...

It introduces a new '--state' flag (and TS_STATE environment variable) that accepts 'kube:<secret-name>' to specify the Kubernetes secret to use. The necessary RBAC permissions for the tsidp service account are documented in the README.

Updates #15965

Signed-off-by: Raj Singh <raj@tailscale.com>

2025-07-25 22:26:59 -05:00

..

addlicense

all: fix golangci-lint errors

2025-01-07 13:05:37 -08:00

build-webclient

client/web: precompress assets

2023-12-07 20:57:31 -05:00

checkmetrics

cmd/checkmetrics: add command for checking metrics against kb

2024-12-02 10:30:46 +01:00

cloner

scripts/check_license_headers.sh: delete, rewrite as a Go test

2025-06-16 13:35:38 -07:00

connector-gen

cmd/connector-gen: add helper tool for wide app connector configurations

2023-12-15 09:29:42 -08:00

containerboot

cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (#16328)

2025-06-27 18:10:04 +01:00

derper

derp/derphttp: add error notify for RunWatchConnectionLoop (#16261)

2025-06-17 13:05:05 -04:00

derpprobe

cmd/{derp,derpprobe},prober,derp: add mesh support to derpprobe (#15414)

2025-06-10 15:29:42 -04:00

dist

cmd/dist,release/dist: sign QNAP builds with a Google Cloud hosted key

2025-04-17 08:39:31 -05:00

get-authkey

cmd,tsnet,internal/client: create internal shim to deprecated control plane API

2025-02-18 10:23:04 -06:00

gitops-pusher

scripts/check_license_headers.sh: delete, rewrite as a Go test

2025-06-16 13:35:38 -07:00

hello

cmd/hello: display native ipv4 (#15191)

2025-03-04 08:47:35 -07:00

k8s-nameserver

cmd/k8s-nameserver: fix AAAA record query response (#12412)

2024-06-10 17:57:22 +01:00

k8s-operator

cmd/{k8s-operator,k8s-proxy},kube/k8s-proxy: add static endpoints for kube-apiserver type ProxyGroups (#16523)

2025-07-14 15:39:39 +01:00

k8s-proxy

cmd/{k8s-operator,k8s-proxy},kube/k8s-proxy: add static endpoints for kube-apiserver type ProxyGroups (#16523)

2025-07-14 15:39:39 +01:00

mkmanifest

cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS

2023-03-01 15:45:12 -07:00

mkpkg

go.mod: upgrade nfpm to v2 (#8786)

2023-08-03 13:00:45 -07:00

mkversion

version/mkversion: open-source version generation logic

2023-02-18 05:21:05 +00:00

nardump

cmd/nardump: support symlinks, add basic test

2025-04-07 19:24:51 -07:00

natc

cmd/natc: add a flag to use specific DNS servers

2025-06-16 13:05:49 -07:00

netlogfmt

all: use Go 1.22 range-over-int

2024-04-16 15:32:38 -07:00

nginx-auth

tailcfg,all: add and use Node.IsTagged()

2023-03-13 08:44:25 -07:00

pgproxy

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

printdep

cmd/printdep: print correct toolchain URL

2023-02-11 17:57:36 +00:00

proxy-test-server

net/tlsdial: fix TLS cert validation of HTTPS proxies

2025-06-18 14:20:39 -07:00

proxy-to-grafana

scripts/check_license_headers.sh: delete, rewrite as a Go test

2025-06-16 13:35:38 -07:00

sniproxy

net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl

2025-04-08 10:07:47 -07:00

speedtest

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

ssh-auth-none-demo

ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh

2025-01-31 16:36:39 -06:00

stunc

cmd/stunc: enforce read timeout deadline (#14309)

2024-12-06 14:27:52 -05:00

stund

types/lazy: add lazy.GMap: a map of lazily computed GValues (#16532)

2025-07-13 05:47:56 -07:00

stunstamp

cmd/stunstamp: add protocol context to timeout logs (#13422)

2024-09-09 18:42:13 -07:00

sync-containers

all: adjust some build tags for plan9

2023-08-24 15:42:35 -07:00

systray

cmd/systray: add cmd/systray back as a small client/systray wrapper

2025-01-06 16:49:34 -08:00

tailscale

cmd/tailscale/cli: add "configure jetkvm" subcommand

2025-07-11 14:35:24 -07:00

tailscaled

all: detect JetKVM and specialize a handful of things for it

2025-07-10 15:07:19 -07:00

testcontrol

all: use Go 1.22 range-over-int

2024-04-16 15:32:38 -07:00

testwrapper

.github/workflows: shard the Windows builder

2025-06-20 06:11:11 -07:00

tl-longchain

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

tsconnect

cmd/tailscale/cli,ipn/ipnlocal: restrict logout when AlwaysOn mode is enabled

2025-07-08 15:02:51 -05:00

tsidp

cmd/tsidp: This change enables tsidp to store its operational state in a Kubernetes secret, similar to how tsrecorder and the k8s-operator can.

2025-07-25 22:26:59 -05:00

tsshd

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

tta

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

viewer

cmd/viewer,all: consistently use "read-only" instead of "readonly"

2025-01-14 08:26:56 -08:00

vnet

cmd/vnet: add wsproxy mode

2025-03-29 11:02:42 -07:00

xdpderper

tsweb: split promvarz into an optional dependency

2025-03-18 16:57:04 -07:00