4494705496
cmd/{k8s-proxy,containerboot,k8s-operator},kube: add health check and metrics endpoints for k8s-proxy (#16540)
David Bond2025-07-22 17:07:51 +01:00
22a8e0ac50
cmd/{k8s-operator,k8s-proxy},kube: use consistent type for auth mode config (#16626)
Tom Proctor2025-07-22 14:46:38 +01:00
6f7e78b10f
cmd/tailscale/cli: make configure kubeconfig accept Tailscale Services (#16601)
Tom Proctor2025-07-22 10:07:09 +01:00
fc5050048e
wgengine/magicsock: don't acquire Conn.mu in udpRelayEndpointReady (#16557)
Jordan Whited2025-07-14 10:42:56 -07:00
fe46f33885
cmd/{k8s-operator,k8s-proxy},kube/k8s-proxy: add static endpoints for kube-apiserver type ProxyGroups (#16523)
Tom Meadows2025-07-14 15:39:39 +01:00
bcaea4f245
k8s-operator,sessionrecording: fixing race condition between resize (#16454)
Tom Meadows2025-07-14 15:17:20 +01:00
f23e4279c4
types/lazy: add lazy.GMap: a map of lazily computed GValues (#16532)
Simon Law2025-07-13 05:47:56 -07:00
f9bfd8118a
wgengine/magicsock: resolve epAddr collisions across peer relay conns (#16526)
Jordan Whited2025-07-10 12:41:14 -07:00
d0cafc0a67
cmd/{k8s-operator,k8s-proxy}: apply accept-routes configuration to k8s-proxy (#16522)
David Bond2025-07-10 15:53:01 +01:00
2b665c370c
cmd/{k8s-operator,k8s-proxy}: allow setting login server url (#16504)
David Bond2025-07-10 14:33:30 +01:00
cf0460b9da
cmd/k8s-operator: allow letsencrypt staging on k8s proxies (#16521)
David Bond2025-07-10 14:33:13 +01:00
fbc4c34cf7
ipn/localapi: do not break client on event marshalling errors (#16503)
Claus Lensbøl2025-07-10 03:04:29 -04:00
6a0fad1e10
wgengine/magicsock: don't peer relay if NodeAttrOnlyTCP443 is set (#16517)
Jordan Whited2025-07-09 20:02:00 -07:00
ae8641735d
cmd/tailscale/cli,ipn/ipnstate,wgengine/magicsock: label peer-relay (#16510)
Jordan Whited2025-07-09 15:17:51 -07:00
d40b25326c
tailcfg, wgengine/magicsock: disable all UDP relay usage if disable-relay-client is set (#16492)
Dylan Bargatze2025-07-09 18:06:58 -04:00
ff1803158a
ipn/ipnlocal: change order of exit node refresh and netmap update so that clients receive the new netmap first
Nick Khyl2025-07-09 13:01:32 -05:00
21a4058ec7
ipn/ipnlocal: add test to verify handling of unknown auto exit node expressions
Nick Khyl2025-07-08 18:35:32 -05:00
c5fdf9e1db
cmd/tailscale/cli: add support for tailscale {up,set} --exit-node=auto:any
Nick Khyl2025-07-09 12:07:44 -05:00
cc2f4ac921
ipn: move ParseAutoExitNodeID from ipn/ipnlocal to ipn
Nick Khyl2025-07-09 11:59:57 -05:00
008a238acd
wgengine/magicsock: support self as candidate peer relay (#16499)
Jordan Whited2025-07-09 09:16:29 -07:00
27fa2ad868
cmd/k8s-operator: don't require generation for Available condition (#16497)
Tom Proctor2025-07-09 09:37:45 +01:00
4dfed6b146
cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266)
Tom Proctor2025-07-09 09:21:56 +01:00
bad17a1bfa
cmd/tailscale: format empty cities and countries as hyphens (#16495)
Simon Law2025-07-08 22:14:18 -07:00
a60e0caf6a
wgengine/magicsock: remove conn.InitiationAwareEndpoint TODO (#16498)
Jordan Whited2025-07-08 19:37:09 -07:00
740b77df59
ipn/ipnlocal,util/syspolicy: add support for ExitNode.AllowOverride policy setting
Nick Khyl2025-07-08 16:08:28 -05:00
2c630e126b
ipn/ipnlocal: make applySysPolicy a method on LocalBackend
Nick Khyl2025-07-07 19:05:41 -05:00
9bf99741dd
ipn/ipnlocal: refactor resolveExitNodeInPrefsLocked, setExitNodeID and resolveExitNodeIP
Nick Khyl2025-07-07 19:02:10 -05:00
1fe82d6ef5
cmd/tailscale/cli,ipn/ipnlocal: restrict logout when AlwaysOn mode is enabled
Nick Khyl2025-07-08 14:37:13 -05:00
5b0074729d
go.mod,wgengine/magicsock: implement conn.InitiationAwareEndpoint (#16486)
Jordan Whited2025-07-08 09:45:18 -07:00
47f431b656
net/udprelay: fix relaying between mixed address family sockets (#16485)
Jordan Whited2025-07-07 19:46:20 -07:00
ea4018b757
ipn/ipnlocal: fix missing defer in testExtension.Shutdown
Nick Khyl2025-07-07 17:21:21 -05:00
f1c7b463cd
ipn/{ipnauth,ipnlocal,localapi}: make EditPrefs return an error if changing exit node is restricted by policy
Nick Khyl2025-07-07 17:04:07 -05:00
a6f6478129
util/syspolicy: add HasAnyOf to check if any specified policy settings are configured
Nick Khyl2025-07-07 11:50:59 -05:00
cb7b49941e
ipn/ipnlocal: add (*LocalBackend).reconcilePrefsLocked
Nick Khyl2025-07-03 19:37:56 -05:00
381fdcc3f1
ipn/ipnlocal,util/syspolicy/source: retain existing exit node when using auto exit node, if it's allowed by policy
Nick Khyl2025-07-03 20:32:30 -05:00
4c1c0bac8d
ipn/ipnlocal: plumb nodeBackend into suggestExitNode to support delta updates, such as online status changes
Nick Khyl2025-07-03 14:32:28 -05:00