public/headscale
1
0
Fork 0
mirror of https://git.vectorsigma.ru/public/headscale.git synced 2026-08-07 21:38:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
4,334 Commits 83 Branches 173 Tags
db6b99d4140fb8bf05ae409be665bb10ba58409d
Commit Graph

4334 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kristoffer Dalby
db6b99d414 types: drop the proto builders 
Remove the Proto() methods and RegisterMethodToV1Enum; the v1 API builds
responses from the state views directly now.
 2026-06-19 05:57:04 +00:00
Kristoffer Dalby
8f5e2e7291 hscontrol: remove the gRPC service and server 
Delete grpcv1.go, the TCP gRPC listener, the gRPC auth interceptor, and the
now-unused HTTP bearer middleware. The v1 API is served only over HTTP (TCP +
unix socket) by the ogen stack.
 2026-06-19 05:57:04 +00:00
Kristoffer Dalby
b5e3b4ee27 hscontrol/api/v1: build responses from state views, not proto 
Convert directly from NodeView/UserView/PreAuthKeyView (no AsStruct copies, no
proto bridge), preserving the view types on the read path. Add UserView.Username
and drop the two state.go uses of PreAuthKey.Proto().
 2026-06-19 05:57:04 +00:00
Kristoffer Dalby
bbb171d02f docs: reconcile v1-ogen plan with delivered state 2026-06-19 05:57:04 +00:00
Kristoffer Dalby
e1325fbacd serve the OpenAPI 3.0 spec at /swagger 
Embed openapi/v1/headscale.yaml and point the Swagger UI at it, replacing the
generated Swagger 2.0 document.
 2026-06-19 05:57:04 +00:00
Kristoffer Dalby
29fc14dd73 cmd/headscale: run the CLI on the generated v1 HTTP client 
Serve the API over the unix socket (auth bypassed; socket permissions are the
trust boundary) and convert every CLI command from the gRPC client to the
generated ogen client. Remote CLI now uses the HTTP API URL.
 2026-06-19 05:57:04 +00:00
Kristoffer Dalby
de85965bd8 hscontrol/api/v1: implement auth and policy endpoints 
AuthRegister/Approve/Reject and GetPolicy/SetPolicy/CheckPolicy over the state
layer, completing all v1 operations. HTTP-parity tests included.
 2026-06-19 05:57:04 +00:00
Kristoffer Dalby
83fb0a4548 hscontrol/api/v1: implement node endpoints 
Register, Get, List, Delete, Rename, Expire, SetTags, SetApprovedRoutes (with
exit-route expansion), BackfillNodeIPs, DebugCreateNode over the state layer.
Tagged nodes present as TaggedDevices; client errors map to 4xx.
 2026-06-19 05:57:04 +00:00
Kristoffer Dalby
fc26c447ec hscontrol/api/v1: implement pre-auth key endpoints 
CreatePreAuthKey (with ACL tag validation), ListPreAuthKeys, ExpirePreAuthKey,
DeletePreAuthKey over the state layer, with HTTP-parity tests.
 2026-06-19 05:57:04 +00:00
Kristoffer Dalby
df6876a570 hscontrol/api/v1: implement API key endpoints 
CreateApiKey, ListApiKeys, ExpireApiKey, DeleteApiKey (by id or prefix) over
the state layer, with HTTP-parity tests.
 2026-06-19 05:57:04 +00:00
Kristoffer Dalby
fe76fe0f57 hscontrol/api/v1: implement user endpoints 
CreateUser, ListUsers (with filters), RenameUser, DeleteUser over the state
layer; unknown users now 404. HTTP-parity tests via the generated client.
 2026-06-19 05:57:04 +00:00
Kristoffer Dalby
1eabd70567 docs: add v1-ogen migration plan and changelog 2026-06-19 05:57:04 +00:00
Kristoffer Dalby
562fcc1401 hscontrol: serve v1 API via ogen, replace grpc-gateway facade 
Mount the ogen-generated server at /api/v1 with bearer-auth and RFC 7807
errors backed by the state layer; gRPC servers stay for the CLI. Add a
servertest API client harness and Health parity tests.
 2026-06-19 05:57:03 +00:00
Kristoffer Dalby
01dcd4011e gen: generate v1 API server and client with ogen 
go generate (gen/api/v1) runs ogen against openapi/v1/headscale.yaml; ogen
added as a tool dependency. CI freshness check covers openapi/.
 2026-06-19 05:57:03 +00:00
Kristoffer Dalby
38dad226c8 openapi: add v1 API OpenAPI 3.0 specification 
Single source of truth for the v1 HTTP API: 27 operations, native int64
ids, RFC 7807 problem responses, bearer auth.
 2026-06-19 05:57:03 +00:00
Kristoffer Dalby
a00de89c85 ci: run nix jobs with --fallback 
cache.nixos.org intermittently serves corrupt NARs; build from source on
substitute failure instead of failing the job.
 2026-06-18 21:11:14 +02:00
Kristoffer Dalby
f5198841bd ci: drop Docker v28 pin from release workflow 
Engine 29 build compat is fixed in the client; the downgrade is no longer
needed.
 2026-06-18 21:11:14 +02:00
Kristoffer Dalby
dfc25f06e1 integration: pin docker client to daemon API version 
dockertest's bundled client builds against API v1.25; Docker Engine 29
rejects it (min 1.40), surfacing as a "broken pipe" that fails every local
image build. Pin to the daemon's reported version so builds use a live path.

Closes #2937
 2026-06-18 21:11:14 +02:00
Kristoffer Dalby
74928c0241 integration: regenerate test matrix for new CLI tests 2026-06-18 15:21:11 +02:00
Kristoffer Dalby
9aba06ec7d integration: backfill CLI command coverage 
Regroup the CLI tests into per-command files and cover every command
except debug/config with CRUD, flag and error permutations, asserted as
JSON.
 2026-06-18 15:21:11 +02:00
Kristoffer Dalby
00afce77b1 ci: run nixos module check with --fallback 
cache.nixos.org intermittently serves corrupt NARs; build from source
on substitute failure instead of failing the job.
 2026-06-18 14:54:44 +02:00
Kristoffer Dalby
9f1886f587 db: preserve user_id on untagged nodes with tags='null' 
A nil tags slice marshals to JSON `null`; the clear-tagged migration
read that as tagged and cleared user_id. Exclude it, and recover
already-detached nodes from their pre-auth key.

Fixes #3323
 2026-06-18 14:54:44 +02:00
Kristoffer Dalby
ea5165e325 util, db: generate key material as hex via tailscale rands 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
368b9e7edd state: add regression test for NodeKey-rotation binding 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
abfd5c9236 types: reject port-bearing server_url under base_domain 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
e4cd846075 handlers: set verify Content-Type before writing the body 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
4b693a1320 oidc, types: validate pkce.method when OIDC is active 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
4f4e95fc80 all: adopt strings, errors, and os helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
27468f944b all: adopt maps and cmp helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
ac725f27e4 all: adopt slices helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
60f0544b78 dns, change, noise, auth, capver: misc consolidation 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
ea5e52f662 hi: consolidate doctor and stats helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
722a2f1e18 integration, hsic, tsic, dockertestutil: consolidate container helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
75b09cb991 servertest: consolidate harness helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
0320b56911 oidc: consolidate cookie helpers and logging 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
62869f01d2 app: simplify TLS and auth setup 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
19d5d9deeb derp: simplify DERP map handling 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
c3cfbf1cc0 grpcv1: share list-RPC response helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
fdc7e26c8a util: consolidate parsing and encoding helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
45e6e90d11 types: consolidate DNS, identifier, and proto helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
468f70a9e5 templates: consolidate shared page and component helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
8c10a96921 hscontrol: consolidate debug-endpoint and template helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
3979887d8d mapper: consolidate builder and connection helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
03e2d24c79 policy/v2, policy/matcher: consolidate alias and IP-set helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
e6ef1dda4d policy: consolidate cache-invalidation and evaluation helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
145672f0b6 state: consolidate route-election and node helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
77f289a627 db: consolidate IP allocation helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
55b9e3cfda db, sqliteconfig: consolidate query and config helpers 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
b56326427c cli: consolidate output and table rendering 2026-06-17 16:12:19 +02:00
Kristoffer Dalby
0b7c8aa270 cli: consolidate gRPC command helpers 2026-06-17 16:12:19 +02:00