This website requires JavaScript.
e9324236e8
cmd/tailscale: fix default for tailscale set --accept-routes
Simon Law
2025-03-18 15:46:57 -07:00
7fc9099cf8
cmd/tailscale: fix default for tailscale set --accept-dns
Simon Law
2025-03-14 21:20:12 -07:00
a3bc0bcb0a
net/dns: add debug envknob to enable dual stack MagicDNS
Brad Fitzpatrick
2025-03-24 09:08:20 -07:00
1ec1a60c10
VERSION.txt: this is v1.83.0 (#15443 )
kari-ts
2025-03-26 14:22:21 -07:00
fea74a60d5
cmd/k8s-operator,k8s-operator: disable HA Ingress before stable release (#15433 )
Irbe Krumina
2025-03-26 13:29:38 +00:00
e3c04c5d6c
build_docker.sh: bump default base image (#15432 )
Irbe Krumina
2025-03-26 11:58:26 +00:00
d0e7af3830
cmd/natc: add test and fix for ip exhaustion
James Tucker
2025-03-20 12:00:37 -07:00
2685484f26
Bump Alpine, link iptables back to legacy (#15428 )
Irbe Krumina
2025-03-26 01:48:01 +00:00
a622debe9b
cmd/{k8s-operator,containerboot}: check TLS cert before advertising VIPService (#15427 )
Irbe Krumina
2025-03-26 01:32:13 +00:00
4777cc2cda
ipn/store/kubestore: skip cache for the write replica in cert share mode (#15417 )
Irbe Krumina
2025-03-25 23:25:29 +00:00
75373896c7
tsnet: Default executable name on iOS
James Nugent
2025-03-21 10:34:16 -04:00
5aa1c27aad
control/controlhttp: quiet "forcing port 443" log spam
Brad Fitzpatrick
2025-03-25 13:32:55 -07:00
725c8d298a
ipn/ipnlocal: remove misleading [unexpected] log for auditlog (#15421 )
Jonathan Nobels
2025-03-25 15:05:50 -04:00
08c8ccb48e
prober: add address family label for udp metrics (#15413 )
Mike O'Driscoll
2025-03-25 12:49:54 -04:00
e78055eb01
ipn/ipnlocal: add more logging for initializing peerAPIListeners
Percy Wegmann
2025-03-24 15:49:58 -05:00
ea79dc161d
tstest/integration/testcontrol: fix AddRawMapResponse race condition
James Sanderson
2025-03-20 15:43:54 +00:00
b3455fa99a
cmd/natc: add some initial unit test coverage
James Tucker
2025-03-20 11:12:20 -07:00
14db99241f
net/netmon: use Monitor's tsIfName if set by SetTailscaleInterfaceName
Brad Fitzpatrick
2025-03-24 10:57:57 -07:00
156cd53e77
net/netmon: unexport GetState
Brad Fitzpatrick
2025-03-24 10:15:37 -07:00
5c0e08fbbd
tstest/mts: add multiple-tailscaled development tool
Brad Fitzpatrick
2025-02-26 15:42:24 -08:00
d0c50c6072
clientupdate: cache CanAutoUpdate, avoid log spam when false
Brad Fitzpatrick
2025-03-23 15:39:54 -07:00
6bbf98bef4
all: skip looking for package comments in .git/ repository (#15384 )
Simon Law
2025-03-21 14:46:02 -07:00
e1078686b3
safesocket: respect context timeout when sleeping for 250ms in retry loop
Brad Fitzpatrick
2025-03-21 10:36:18 -07:00
c261fb198f
tstest: make it clearer where AwaitRunning failed and why
James Sanderson
2025-03-21 12:00:01 +00:00
5668de272c
tsnet: use test logger for testcontrol and node logs
James Sanderson
2025-03-21 11:56:48 +00:00
005e20a45e
cmd/k8s-operator,internal/client/tailscale: use VIPService annotations for ownership tracking (#15356 )
Tom Proctor
2025-03-21 02:08:39 -07:00
196ae1cd74
cmd/k8s-operator,k8s-operator: allow optionally using LE staging endpoint for Ingress (#15360 )
Irbe Krumina
2025-03-21 08:53:41 +00:00
f3f2f72f96
ipn/ipnlocal: do not attempt to start the auditlogger with a nil transport
Nick Khyl
2025-03-20 15:15:23 -05:00
e07c1573f6
ipn/ipnlocal: do not reset the netmap and packet filter in (*LocalBackend).Start()
Nick Khyl
2025-03-17 14:58:25 -05:00
984cd1cab0
cmd/tailscale: add CLI debug command to do raw LocalAPI requests
Brad Fitzpatrick
2025-03-20 07:39:51 -07:00
f34e08e186
ipn: ensure that conffile is source of truth for advertised services. (#15361 )
Irbe Krumina
2025-03-20 14:40:36 +00:00
3a2c92f08e
web: support Host 100.100.100.100:80 in tailscaled web server
klyubin
2025-03-19 10:46:32 -06:00
8d84720edb
cmd/k8s-operator: update ProxyGroup config Secrets instead of patch (#15353 )
Tom Proctor
2025-03-19 06:49:36 -07:00
25d5f78c6e
net/dns: expose a function for recompiling the DNS configuration (#15346 )
Jonathan Nobels
2025-03-19 09:21:37 -04:00
f50d3b22db
cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308 )
Irbe Krumina
2025-03-19 12:49:31 +00:00
b0095a5da4
cmd/k8s-operator: wait for VIPService before updating HA Ingress status (#15343 )
Tom Proctor
2025-03-19 01:53:15 -07:00
e091e71937
util/eventbus: remove debug UI from iOS build
David Anderson
2025-03-07 09:49:09 -08:00
daa5635ba6
tsweb: split promvarz into an optional dependency
David Anderson
2025-03-13 15:29:58 -07:00
74ee749386
client/tailscale: add tailnet lock fields to Device struct
Anton Tolchanov
2025-03-17 18:06:58 +00:00
34734ba635
ipn/store/kubestore,kube,envknob,cmd/tailscaled/depaware.txt: allow kubestore read/write custom TLS secrets (#15307 )
Irbe Krumina
2025-03-18 15:09:22 +00:00
ef1e14250c
cmd/k8s-operator: ensure old VIPServices are cleaned up (#15344 )
Tom Proctor
2025-03-18 05:48:59 -07:00
b413b70ae2
cmd/proxy-to-grafana: support setting Grafana role via grants
Anton Tolchanov
2025-03-09 16:55:51 -07:00
25b059c0ee
licenses: update license notices
License Updater
2025-03-17 15:02:33 +00:00
27ef9b666c
ipn/ipnlocal: add test for CapMap packet filters
James Sanderson
2025-03-07 15:07:00 +00:00
3a4b622276
.github/workflows/govulncheck.yml: send messages to another channel (#15295 )
Andrew Lytvynov
2025-03-14 12:30:29 -07:00
299c5372bd
cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303 )
Irbe Krumina
2025-03-14 17:33:08 +00:00
8b1e7f646e
net/packet: implement Geneve header serialization (#15301 )
Jordan Whited
2025-03-13 13:33:26 -07:00
f0b395d851
go.mod update golang.org/x/net to 0.36.0 for govulncheck (#15296 )
Patrick O'Doherty
2025-03-13 10:37:42 -07:00
0663412559
util/eventbus: add basic throughput benchmarks (#15284 )
M. J. Fromberger
2025-03-13 08:06:20 -07:00
eb680edbce
cmd/testwrapper: print failed tests preventing retry (#15270 )
Paul Scott
2025-03-13 14:21:29 +00:00
cd391b37a6
ipn/ipnlocal, envknob: make it possible to configure the cert client to act in read-only mode (#15250 )
Irbe Krumina
2025-03-13 14:14:03 +00:00
45ecc0f85a
tsweb: add title to DebugHandler and helper registration methods
Will Norris
2025-03-12 15:00:26 -07:00
6d217d81d1
util/eventbus: add a helper program for bus development
David Anderson
2025-03-07 09:49:09 -08:00
d83024a63f
util/eventbus: add a debug HTTP handler for the bus
David Anderson
2025-03-07 08:18:33 -08:00
640b2fa3ae
net/netmon, wgengine/magicsock: be quieter with portmapper logs
Andrew Dunham
2025-03-12 17:04:57 -04:00
52710945f5
control/controlclient, ipn: add client audit logging (#14950 )
Jonathan Nobels
2025-03-12 10:37:03 -04:00
06ae52d309
words: append to the tail of the wordlists (#15278 )
Naman Sood
2025-03-11 17:23:21 -04:00
5ebc135397
tsnet,wgengine: fix src to primary Tailscale IP for TCP dials
Fran Bull
2025-03-05 10:25:30 -08:00
8f0080c7a4
cmd/tsidp: allow CORS requests to openid-configuration (#15229 )
Patrick O'Doherty
2025-03-11 13:10:22 -07:00
03f7f1860e
.github: Bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 (#15257 )
dependabot[bot]
2025-03-11 11:31:52 -06:00
ce0d8b0fb9
.github: Bump github/codeql-action from 3.28.10 to 3.28.11 (#15258 )
dependabot[bot]
2025-03-11 11:25:35 -06:00
660b0515b9
safesocket, version: fix safesocket_darwin behavior for cmd/tailscale (#15275 )
Jonathan Nobels
2025-03-11 13:24:11 -04:00
a6e19f2881
ipn/ipnlocal: allow cache hits for testing ACME certs (#15023 )
Tom Proctor
2025-03-11 07:09:46 -07:00
e38e5c38cc
ssh/tailssh: fix typo in forwardedEnviron method, add docs
Brad Fitzpatrick
2025-03-10 13:03:10 -07:00
69b27d2fcf
cmd/natc: error and log when IP range is exhausted
James Tucker
2025-03-07 14:27:13 -07:00
b9f4c5d246
.github: Bump golangci/golangci-lint-action from 6.3.1 to 6.5.0 (#15046 )
dependabot[bot]
2025-03-09 13:31:02 -06:00
71b1ae6bef
.github: Bump actions/upload-artifact from 4.6.0 to 4.6.1 (#15111 )
dependabot[bot]
2025-03-09 13:02:04 -06:00
5827e20fdf
.github: Bump github/codeql-action from 3.28.9 to 3.28.10 (#15110 )
dependabot[bot]
2025-03-09 12:42:13 -06:00
f67725c3ff
.github: Bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 (#15113 )
dependabot[bot]
2025-03-09 12:41:30 -06:00
eb3313e825
tailcfg: add DERPRegion.NoMeasureNoHome, deprecate+document Avoid [cap 115]
Brad Fitzpatrick
2025-03-07 17:12:07 -07:00
346a35f612
util/eventbus: add debugger methods to list pub/sub types
David Anderson
2025-03-07 08:16:53 -08:00
e71e95b841
util/eventbus: don't allow publishers to skip events while debugging
David Anderson
2025-03-07 13:01:35 -08:00
853abf8661
util/eventbus: initial debugging facilities for the event bus
David Anderson
2025-03-06 21:51:18 -08:00
5ce8cd5fec
.github/workflows: tidy go caches before uploading
Mario Minardi
2025-03-06 22:10:22 -07:00
5177fd2ccb
net/portmapper: retry UPnP when we get an "Invalid Args"
Andrew Dunham
2025-03-06 21:00:18 -05:00
a4b8c24834
ipn: sort VIP services before hashing (#15035 )
Naman Sood
2025-03-07 12:50:15 -05:00
75a03fc719
wgengine/magicsock: use learned DERP route as send path of last resort
Brad Fitzpatrick
2025-02-07 19:45:20 -08:00
7fac0175c0
cmd/derper, derp/derphttp: support, generate self-signed IP address certs
Brad Fitzpatrick
2025-03-04 13:41:12 -08:00
e80d2b4ad1
util/eventbus: add debug hooks to snoop on bus traffic
David Anderson
2025-03-05 19:37:03 -08:00
dd7166cb8e
util/eventbus: add internal hook type for debugging
David Anderson
2025-03-05 18:57:14 -08:00
74a2373e1d
cmd/k8s-operator: ensure HA Ingress can operate in multicluster mode. (#15157 )
Irbe Krumina
2025-03-06 15:13:10 -08:00
9d7f2719bb
cmd/tsidp: use constant time comparison for client_id/secret (#15222 )
Patrick O'Doherty
2025-03-06 08:52:35 -08:00
ffb0b66d5b
cmd/k8s-operator: advertise VIPServices in ProxyGroup config (#14946 )
Tom Proctor
2025-03-06 06:05:41 -08:00
cf5c788cf1
util/eventbus: track additional event context in subscribe queue
David Anderson
2025-03-05 10:42:08 -08:00
a1192dd686
util/eventbus: track additional event context in publish queue
David Anderson
2025-03-05 10:39:06 -08:00
bf40bc4fa0
util/eventbus: make internal queue a generic type
David Anderson
2025-03-05 10:33:35 -08:00
96202a7c0c
.github/workflows: descope natlab CI for now until GitHub flakes are fixed
Brad Fitzpatrick
2025-03-05 14:14:19 -08:00
27e0575f76
cmd/tsidp: add README and Dockerfile (#15205 )
Sam Linville
2025-03-05 10:55:37 -06:00
c6b8e6f6b7
licenses: update license notices
License Updater
2025-03-03 15:02:35 +00:00
24d4846f00
util/eventbus: adjust worker goroutine management helpers
David Anderson
2025-03-04 12:08:32 -08:00
5eafce7e25
gokrazy/natlab: update gokrazy, wire up natlab tests to GitHub CI
Brad Fitzpatrick
2025-02-07 20:25:43 -08:00
3e18434595
util/eventbus: rework to have a Client abstraction
David Anderson
2025-03-04 11:22:30 -08:00
f840aad49e
go.toolchain.rev: bump to go1.24.1 (#15209 )
Patrick O'Doherty
2025-03-04 16:17:57 -08:00
1d2d449b57
.github: Bump actions/cache from 4.2.0 to 4.2.2
dependabot[bot]
2025-03-03 11:56:15 +00:00
cae5b97626
cmd/derper: add --home flag to control home page behavior
Brad Fitzpatrick
2025-03-04 07:41:44 -08:00
fa374fa852
cmd/testwrapper: Display package-level output
James Sanderson
2025-03-04 11:46:05 +00:00
e74a705c67
cmd/hello: display native ipv4 (#15191 )
Brian Palmer
2025-03-04 08:47:35 -07:00
16a920b96e
safesocket: add isMacSysExt Check (#15192 )
Jonathan Nobels
2025-03-03 18:28:26 -05:00
5449aba94c
safesocket: correct logic for determining if we're a macOS GUI client (#15187 )
Jonathan Nobels
2025-03-03 14:54:57 -05:00
ce6ce81311
ipn/ipnlocal: initialize Taildrive shares when starting backend
Percy Wegmann
2025-02-28 18:30:14 -06:00