You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Nick Khyl
6a9a7f35d9
cmd/tailscaled,ipn/{auditlog,ipnlocal},tsd: omit auditlog unless explicitly imported
...
In this PR, we update ipnlocal.LocalBackend to allow registering callbacks for control client creation
and profile changes. We also allow to register ipnauth.AuditLogFunc to be called when an auditable
action is attempted.
We then use all this to invert the dependency between the auditlog and ipnlocal packages and make
the auditlog functionality optional, where it only registers its callbacks via ipnlocal-provided hooks
when the auditlog package is imported.
We then underscore-import it when building tailscaled for Windows, and we'll explicitly
import it when building xcode/ipn-go-bridge for macOS. Since there's no default log-store
location for macOS, we'll also need to call auditlog.SetStoreFilePath to specify where
pending audit logs should be persisted.
Fixes #15394
Updates tailscale/corp#26435
Updates tailscale/corp#27012
Signed-off-by: Nick Khyl <nickk@tailscale.com>
1 year ago
..
addlicense
all: fix golangci-lint errors
1 year ago
build-webclient
client/web: precompress assets
2 years ago
checkmetrics
cmd/checkmetrics: add command for checking metrics against kb
1 year ago
cloner
cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types
2 years ago
connector-gen
cmd/connector-gen: add helper tool for wide app connector configurations
2 years ago
containerboot
cmd/{k8s-operator,containerboot}: check TLS cert before advertising VIPService ( #15427 )
1 year ago
derper
tsweb: split promvarz into an optional dependency
1 year ago
derpprobe
tsweb: split promvarz into an optional dependency
1 year ago
dist
release/dist/qnap: add qnap target builder
2 years ago
get-authkey
cmd,tsnet,internal/client: create internal shim to deprecated control plane API
1 year ago
gitops-pusher
cmd/gitops-pusher: log error details when unable to fetch ACL ETag
1 year ago
hello
cmd/hello: display native ipv4 ( #15191 )
1 year ago
k8s-nameserver
cmd/k8s-nameserver: fix AAAA record query response ( #12412 )
2 years ago
k8s-operator
cmd/tailscaled,ipn/{auditlog,ipnlocal},tsd: omit auditlog unless explicitly imported
1 year ago
mkmanifest
cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS
3 years ago
mkpkg
go.mod: upgrade nfpm to v2 ( #8786 )
3 years ago
mkversion
version/mkversion: open-source version generation logic
3 years ago
nardump
all: update copyright and license headers
3 years ago
natc
cmd/natc: add test and fix for ip exhaustion
1 year ago
netlogfmt
all: use Go 1.22 range-over-int
2 years ago
nginx-auth
tailcfg,all: add and use Node.IsTagged()
3 years ago
pgproxy
all: use new LocalAPI client package location
1 year ago
printdep
cmd/printdep: print correct toolchain URL
3 years ago
proxy-to-grafana
cmd/proxy-to-grafana: support setting Grafana role via grants
1 year ago
sniproxy
all: use new LocalAPI client package location
1 year ago
speedtest
all: update copyright and license headers
3 years ago
ssh-auth-none-demo
ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh
1 year ago
stunc
cmd/stunc: enforce read timeout deadline ( #14309 )
1 year ago
stund
tsweb: split promvarz into an optional dependency
1 year ago
stunstamp
cmd/stunstamp: add protocol context to timeout logs ( #13422 )
2 years ago
sync-containers
all: adjust some build tags for plan9
3 years ago
systray
cmd/systray: add cmd/systray back as a small client/systray wrapper
1 year ago
tailscale
cmd/tailscale: fix default for `tailscale set --accept-routes`
1 year ago
tailscaled
cmd/tailscaled,ipn/{auditlog,ipnlocal},tsd: omit auditlog unless explicitly imported
1 year ago
testcontrol
all: use Go 1.22 range-over-int
2 years ago
testwrapper
cmd/testwrapper: print failed tests preventing retry ( #15270 )
1 year ago
tl-longchain
all: use new LocalAPI client package location
1 year ago
tsconnect
go.toolchain.branch: update to Go 1.24 ( #15016 )
1 year ago
tsidp
cmd/tsidp: allow CORS requests to openid-configuration ( #15229 )
1 year ago
tsshd
all: update copyright and license headers
3 years ago
tta
all: use new LocalAPI client package location
1 year ago
viewer
cmd/viewer,all: consistently use "read-only" instead of "readonly"
1 year ago
vnet
tstest/natlab/vnet: add start of IPv6 support
2 years ago
xdpderper
tsweb: split promvarz into an optional dependency
1 year ago