You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Irbe Krumina cd391b37a6 ipn/ipnlocal, envknob: make it possible to configure the cert client to act in read-only mode (#15250) ... * ipn/ipnlocal,envknob: add some primitives for HA replica cert share. Add an envknob for configuring an instance's cert store as read-only, so that it does not attempt to issue or renew TLS credentials, only reads them from its cert store. This will be used by the Kubernetes Operator's HA Ingress to enable multiple replicas serving the same HTTPS endpoint to be able to share the same cert. Also some minor refactor to allow adding more tests for cert retrieval logic. Signed-off-by: Irbe Krumina <irbe@tailscale.com>		1 year ago
..
auditlog	control/controlclient, ipn: add client audit logging (#14950)	1 year ago
conffile	ipn/conffile: don't depend on hujson on iOS/Android	2 years ago
desktop	various: keep tailscale connected when Always On mode is enabled on Windows	1 year ago
ipnauth	control/controlclient, ipn: add client audit logging (#14950)	1 year ago
ipnlocal	ipn/ipnlocal, envknob: make it possible to configure the cert client to act in read-only mode (#15250)	1 year ago
ipnserver	various: keep tailscale connected when Always On mode is enabled on Windows	1 year ago
ipnstate	ipn: update AddPeer to include TaildropTarget (#15091)	1 year ago
localapi	ipn/{ipnserver,localapi},tsnet: use ipnauth.Self as the actor in tsnet localapi handlers	1 year ago
policy	ipn,tailconfig: clean up unreleased and removed app connector service	2 years ago
store	ipn/store/kubestore: sanitize keys loaded to in-memory store (#15178)	1 year ago
backend.go	ipn: declare NotifyWatchOpt consts without using iota	1 year ago
conf.go	ipn/conf.go: add VIPServices to tailscaled configfile (#14345)	1 year ago
doc.go	ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate	1 year ago
ipn_clone.go	ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate	1 year ago
ipn_test.go	all: do not depend on the testing package	2 years ago
ipn_view.go	ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate	1 year ago
prefs.go	cmd/tailscale,ipn,tailcfg: add `tailscale advertise` subcommand behind envknob (#13734)	2 years ago
prefs_test.go	types/persist: remove Persist.LegacyFrontendPrivateMachineKey	1 year ago
serve.go	tailcfg: add ServiceName	1 year ago
serve_test.go	ipn: [serve] warn that foreground funnel won't work if shields are up (#14685)	1 year ago
store.go	ipn: add comment about thread-safety to StateStore	2 years ago
store_test.go	ipn: avoid useless no-op WriteState calls	3 years ago