Commit Graph

  • 80a0c036ad Add AI policy ai-policy Juan Font 2026-07-29 12:49:50 +02:00
  • d65ca4e07d Deployed 5aff68b5 to 0.29.3 with ProperDocs 1.6.7 and mike 2.2.0 gh-pages github-actions 2026-07-29 12:38:40 +00:00
  • 5aff68b5b9 mkdocs: bump version v0.29.3 release-branch/0.29 Kristoffer Dalby 2026-07-28 12:49:21 +00:00
  • 235a57ec31 CHANGELOG: add 0.29.3 Kristoffer Dalby 2026-07-28 10:55:22 +00:00
  • bdc3e996de hscontrol: prefer completed auth over expired ctx in followup wait Kristoffer Dalby 2026-07-21 13:57:49 +00:00
  • 5fb514e6e0 poll: do not cancel ephemeral GC until Connect succeeds Igor Serganov 2026-07-24 14:15:54 -07:00
  • 4a1e77359d policy,state: authorize reauth tags against the authenticating user Kristoffer Dalby 2026-07-22 06:44:22 +00:00
  • 1fccdb18bd state: apply a new pre-auth key's tags on re-registration Kristoffer Dalby 2026-07-22 06:32:08 +00:00
  • d202883200 state: do not expire tagged nodes on logout Kristoffer Dalby 2026-07-22 06:27:34 +00:00
  • 9609a0b87d hscontrol: gate /key on supported capability version Kristoffer Dalby 2026-07-21 13:49:49 +00:00
  • fba84ca232 auth: check machine key on the followup registration path Arpit Jain 2026-07-22 03:34:29 +09:00
  • 089d6c4109 Explicitly select lunr as search provider Florian Preinstorfer 2026-07-24 18:48:26 +02:00
  • 12928418b8 build: bump Go toolchain to 1.26.5 Kristoffer Dalby 2026-07-20 08:59:03 +00:00
  • 3aecbafbc4 Deployed 565fd254 to development with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-07-29 09:12:52 +00:00
  • 565fd254d0 mkdocs: bump version main Kristoffer Dalby 2026-07-28 12:49:21 +00:00
  • 8bb26c5967 CHANGELOG: add 0.29.3 Kristoffer Dalby 2026-07-28 10:55:22 +00:00
  • d28a6b111a hscontrol: prefer completed auth over expired ctx in followup wait Kristoffer Dalby 2026-07-21 13:57:49 +00:00
  • 54a2746f55 Makefile: enable CGO for make test in dev shell Simon Law 2026-07-28 10:46:19 -07:00
  • cfd845cb53 poll: do not cancel ephemeral GC until Connect succeeds Igor Serganov 2026-07-24 14:15:54 -07:00
  • dc3c0bc587 cli: remove leftover trace log from #3324 that always renders a JSON marshaling error Fredrik Ekre 2026-07-27 22:51:46 +02:00
  • 6275e3a356 policy,state: authorize reauth tags against the authenticating user Kristoffer Dalby 2026-07-22 06:44:22 +00:00
  • fc16cc6905 state: apply a new pre-auth key's tags on re-registration Kristoffer Dalby 2026-07-22 06:32:08 +00:00
  • 1ed5693fa4 state: do not expire tagged nodes on logout Kristoffer Dalby 2026-07-22 06:27:34 +00:00
  • 5b6e1e17be hscontrol: gate /key on supported capability version Kristoffer Dalby 2026-07-21 13:49:49 +00:00
  • 0ce3356b89 auth: check machine key on the followup registration path Arpit Jain 2026-07-22 03:34:29 +09:00
  • 3c28523d0d build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 dependabot/go_modules/google.golang.org/grpc-1.82.1 dependabot[bot] 2026-07-25 06:33:42 +00:00
  • 0b3074fd87 Deployed 7a1ee34f to development with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-07-24 19:29:14 +00:00
  • 7a1ee34f71 Explicitly select lunr as search provider Florian Preinstorfer 2026-07-24 18:48:26 +02:00
  • f20f1f1278 ci: bump Mic92/hestia to v2.0.0 Kristoffer Dalby 2026-07-21 08:07:06 +00:00
  • 8eec2dbdc2 build: bump Go toolchain to 1.26.5 Kristoffer Dalby 2026-07-20 08:59:03 +00:00
  • 3566399f05 Update vouch version vouch Juan Font 2026-07-17 08:38:37 +00:00
  • 9d51a45093 Add vouched Juan Font 2026-07-17 08:37:40 +00:00
  • 048308511c chore: fix function comment to match actual function name alaningtrump 2026-07-03 11:00:06 +08:00
  • 0a2fbc13d5 Deployed 8eea8948 to 0.29.2 with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-07-01 14:51:06 +00:00
  • 8eea89488c CHANGELOG: drop unreleased 0.30.0 stub v0.29.2 kradalby/release-v0.29.2 Kristoffer Dalby 2026-07-01 14:41:40 +00:00
  • f885d87827 Fix invalid ip syntax Florian Preinstorfer 2026-06-24 08:00:57 +02:00
  • 3ac33cf1d5 CHANGELOG: shorten 0.29.2 invalid-name entry, set date Kristoffer Dalby 2026-07-01 13:35:10 +00:00
  • f708c5b010 CHANGELOG: note /ts2021 WebSocket GET fix Kristoffer Dalby 2026-07-01 08:40:47 +00:00
  • 8f4e69d2a6 integration: add TS2021 WebSocket tests to CI matrix Kristoffer Dalby 2026-07-01 08:39:21 +00:00
  • e7851ef881 integration: test /ts2021 WebSocket GET with a real WASM client Kristoffer Dalby 2026-07-01 08:39:12 +00:00
  • 1ec7b7fb72 hscontrol: register /ts2021 for WebSocket GET Kristoffer Dalby 2026-07-01 08:38:57 +00:00
  • 735742e3ee CHANGELOG: note 0.29.2 invalid-name map fix Kristoffer Dalby 2026-06-26 14:20:26 +00:00
  • fd154fdb66 state: log nodes with map-breaking data at startup Kristoffer Dalby 2026-06-26 14:19:55 +00:00
  • 9c9206a92b state: reject renames whose FQDN exceeds the hostname limit Kristoffer Dalby 2026-06-26 14:19:42 +00:00
  • 5fb76eb231 poll: return an HTTP error on long-poll setup failure Kristoffer Dalby 2026-06-26 14:19:33 +00:00
  • ec67197368 mapper: skip peers with invalid names instead of failing the map Kristoffer Dalby 2026-06-26 14:19:19 +00:00
  • 9d1327458f mapper,policy: add reconnect-storm and lock-concurrency regression tests Kristoffer Dalby 2026-07-01 09:40:28 +00:00
  • d4f2acf3ab policy: take RLock for reads so map generation runs concurrently Kristoffer Dalby 2026-07-01 09:40:21 +00:00
  • a84945f134 CHANGELOG: shorten 0.29.2 invalid-name entry, set date Kristoffer Dalby 2026-07-01 13:35:10 +00:00
  • fef80f3eb0 CHANGELOG: note /ts2021 WebSocket GET fix backup/release-v0.29.2-orig Kristoffer Dalby 2026-07-01 08:40:47 +00:00
  • 01ef350d5f integration: add TS2021 WebSocket tests to CI matrix Kristoffer Dalby 2026-07-01 08:39:21 +00:00
  • f4fba32dc6 integration: test /ts2021 WebSocket GET with a real WASM client Kristoffer Dalby 2026-07-01 08:39:12 +00:00
  • fc6f216b61 hscontrol: register /ts2021 for WebSocket GET Kristoffer Dalby 2026-07-01 08:38:57 +00:00
  • de9db9c811 CHANGELOG: note 0.29.2 invalid-name map fix Kristoffer Dalby 2026-06-26 14:20:26 +00:00
  • 4946d1c88d state: log nodes with map-breaking data at startup Kristoffer Dalby 2026-06-26 14:19:55 +00:00
  • c497612c99 state: reject renames whose FQDN exceeds the hostname limit Kristoffer Dalby 2026-06-26 14:19:42 +00:00
  • 4e4512c4b7 poll: return an HTTP error on long-poll setup failure Kristoffer Dalby 2026-06-26 14:19:33 +00:00
  • 08956d51a4 mapper: skip peers with invalid names instead of failing the map Kristoffer Dalby 2026-06-26 14:19:19 +00:00
  • d528686f14 mapper,policy: add reconnect-storm and lock-concurrency regression tests Kristoffer Dalby 2026-07-01 09:40:28 +00:00
  • 6f317c7576 policy: take RLock for reads so map generation runs concurrently Kristoffer Dalby 2026-07-01 09:40:21 +00:00
  • 518b497be9 ci: run TestK8sOperator in the shared sqlite matrix Kristoffer Dalby 2026-06-26 13:17:16 +00:00
  • 8d91e42a9f cmd/hi: share the test-container prefix matcher and check the k3s image Kristoffer Dalby 2026-06-26 13:17:12 +00:00
  • 99fd62477d integration: add a k3s and Tailscale Kubernetes operator test Kristoffer Dalby 2026-06-26 13:17:08 +00:00
  • c7b162509c integration/hsic: add CreateOAuthClient via the v2 API client Kristoffer Dalby 2026-06-26 13:16:49 +00:00
  • a4ec76605e integration/tsic: add WithDERPOverHTTP for the non-TLS embedded DERP Kristoffer Dalby 2026-06-26 13:16:43 +00:00
  • 1867213b69 capver: order TailscaleLatestMajorMinor versions with cmpver Kristoffer Dalby 2026-06-26 13:16:36 +00:00
  • c64b7977c1 build(deps): bump github.com/opencontainers/runc from 1.3.2 to 1.3.6 dependabot/go_modules/github.com/opencontainers/runc-1.3.6 dependabot[bot] 2026-06-26 07:19:47 +00:00
  • 622e08f5e6 oidc: harden callback CSRF cookies, state reuse, and issuer config Kristoffer Dalby 2026-06-24 12:45:47 +00:00
  • 79bf201ccb changelog: note OAuth clients and scopes Kristoffer Dalby 2026-06-21 17:35:57 +00:00
  • af46fe8867 hscontrol, integration: test OAuth scope enforcement and the oauth-clients CLI Kristoffer Dalby 2026-06-21 17:35:44 +00:00
  • b05f8875c3 hscontrol, cli: serve the v2 API on the local socket and add the oauth-clients command Kristoffer Dalby 2026-06-21 17:35:36 +00:00
  • 84715e976c api/v2: add OAuth client-credentials auth and scope enforcement Kristoffer Dalby 2026-06-21 17:35:32 +00:00
  • ee95cf58d9 hscontrol: add the OAuth client and access-token model Kristoffer Dalby 2026-06-21 17:35:14 +00:00
  • 7b1776a87e Add changelog entry for systemd service refresh Florian Preinstorfer 2026-06-25 10:45:07 +02:00
  • f6865fb40c Filter @resources from the list of allowed syscalls Florian Preinstorfer 2026-06-22 11:46:17 +02:00
  • 6e0814a845 Add DevicePolicy and MemoryDenyWriteExecute Florian Preinstorfer 2026-06-22 11:39:07 +02:00
  • 6e6ea3758d Remove CAP_CHOWN from systemd service Florian Preinstorfer 2026-06-21 17:30:53 +02:00
  • 3846c3f148 Remove X-Restart-Triggers from systemd service file Florian Preinstorfer 2026-06-21 15:45:57 +02:00
  • fe536dd799 Slightly restructure the example config comments Florian Preinstorfer 2026-06-21 06:34:08 +02:00
  • 8b17c26d11 oidc: harden callback CSRF cookies, state reuse, and issuer config v2-oauth Kristoffer Dalby 2026-06-24 12:45:47 +00:00
  • 3fca03ad61 changelog: note OAuth clients and scopes Kristoffer Dalby 2026-06-21 17:35:57 +00:00
  • 90bffbebdd hscontrol, integration: test OAuth scope enforcement and the oauth-clients CLI Kristoffer Dalby 2026-06-21 17:35:44 +00:00
  • 84bb7c3794 hscontrol, cli: serve the v2 API on the local socket and add the oauth-clients command Kristoffer Dalby 2026-06-21 17:35:36 +00:00
  • 87555ce621 api/v2: add OAuth client-credentials auth and scope enforcement Kristoffer Dalby 2026-06-21 17:35:32 +00:00
  • 3fdc068c8c hscontrol: add the OAuth client and access-token model Kristoffer Dalby 2026-06-21 17:35:14 +00:00
  • 5aeeff98d0 oidc: fix NewProvider ignoring caller context timeout Fredrik Ekre 2026-06-22 13:12:02 +02:00
  • 66937040f2 policy: allow the tailscale.com/cap/secrets capability Kristoffer Dalby 2026-06-23 07:09:15 +02:00
  • 036760df02 hscontrol: collapse key and settings asserts into cmp.Diff Kristoffer Dalby 2026-06-24 08:16:17 +00:00
  • 83d3828ba1 api/v2: simplify endpoint comments Kristoffer Dalby 2026-06-24 08:16:09 +00:00
  • dd9f0a3f4f servertest: roundtrip v2 users and 4via6 through the clients Kristoffer Dalby 2026-06-21 04:21:07 +00:00
  • 961b15313f hscontrol: contract-test the v2 users endpoint Kristoffer Dalby 2026-06-21 04:20:54 +00:00
  • 475a5ead0c api/v2: add user get and list (Tailscale compat) Kristoffer Dalby 2026-06-21 04:20:36 +00:00
  • 511400599f Deployed 628279ea to 0.29.1 with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-06-24 09:35:01 +00:00
  • 628279ea25 Fix invalid ip syntax doc/0.29.1 Florian Preinstorfer 2026-06-24 08:00:57 +02:00
  • 31c24d3879 Deployed ec0cb6f6 to development with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-06-24 09:29:40 +00:00
  • ec0cb6f63a docs: fix typos Baptiste Fontaine 2026-06-24 09:44:30 +02:00
  • 9f5c56401f Deployed a066a06b to development with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-06-24 06:28:09 +00:00
  • a066a06bef Fix invalid ip syntax Florian Preinstorfer 2026-06-24 08:00:57 +02:00
  • 33a65052c9 servertest: roundtrip the v2 API through go-client, tscli, and opentofu Kristoffer Dalby 2026-06-20 20:16:51 +00:00
  • 13ffd958ed hscontrol: add v2 API contract tests Kristoffer Dalby 2026-06-20 20:16:51 +00:00