Commit Graph

  • 99767cf805 hscontrol: validate machine key and bind src/dst in SSH check handler Kristoffer Dalby 2026-04-09 17:41:01 +00:00
  • 0d4f2293ff state: replace zcache with bounded LRU for auth cache Kristoffer Dalby 2026-04-09 17:27:42 +00:00
  • 3587225a88 mapper: fix phantom updateSentPeers on disconnected nodes Kristoffer Dalby 2026-04-08 12:27:04 +00:00
  • 9371b4ee28 mapper: fix empty Peers list not clearing client peer state Kristoffer Dalby 2026-04-08 12:26:44 +00:00
  • cef5338cfe types/change: panic on Merge with conflicting TargetNode values Kristoffer Dalby 2026-04-08 12:26:22 +00:00
  • 3529fe0da1 types: fix OIDC identifier path traversal dropping subject Kristoffer Dalby 2026-04-08 12:26:06 +00:00
  • 4064f13bda types: fix nil panics in Owner() and TailscaleUserID() for orphaned nodes Kristoffer Dalby 2026-04-08 12:25:50 +00:00
  • 3037e5eee0 db: fix slice aliasing in migration tag merge Kristoffer Dalby 2026-04-08 12:25:21 +00:00
  • 82bb4331f5 state: fix routesChanged mutating input Hostinfo Kristoffer Dalby 2026-04-02 13:11:25 +00:00
  • 2a2d5c869a types/change: fix slice aliasing in Change.Merge Kristoffer Dalby 2026-04-02 13:10:20 +00:00
  • 157e3a30fc AGENTS.md: trim to behavioural guidance, drop deprecated sub-agent Kristoffer Dalby 2026-04-09 15:42:24 +00:00
  • 70b622fc68 docs: expand cmd/hi and integration READMEs Kristoffer Dalby 2026-04-09 15:39:15 +00:00
  • 742878d172 all: regenerate generated files for new tool versions Kristoffer Dalby 2026-04-09 16:51:25 +00:00
  • 2109674467 nix: update flake inputs and dev shell tool versions Kristoffer Dalby 2026-04-09 16:10:07 +00:00
  • 36a73f8c22 all: update Go dependencies Kristoffer Dalby 2026-04-09 16:09:43 +00:00
  • e40dbe3b28 Dockerfile: bump tailscale DERPer builder to Go 1.26.2 Kristoffer Dalby 2026-04-09 16:09:01 +00:00
  • 2764e5f228 testdata: re-run ssh tscap corpus with localpart anonymization backup/pre-rebase-20260409-092352 Kristoffer Dalby 2026-04-09 08:51:57 +00:00
  • 7c756b8201 db: scope DestroyUser to only delete the target user's pre-auth keys Jacky 2026-03-27 13:12:20 +00:00
  • d6082cb9f6 testdata: re-run tscap with populated approved_routes and tag fixes backup/pre-msg-rewrite-3169 Kristoffer Dalby 2026-04-09 06:20:03 +00:00
  • 5cba8ddc62 testdata: re-run tscap with populated approved_routes and tag fixes Kristoffer Dalby 2026-04-09 06:20:03 +00:00
  • 0c577301c6 policy/v2: ignore implementation-specific SSH check action fields Kristoffer Dalby 2026-04-09 06:19:17 +00:00
  • a19fd9bf00 policy/v2: ignore implementation-specific SSH check action fields Kristoffer Dalby 2026-04-09 06:19:17 +00:00
  • 1e20972db0 servertest: align via grant compat test with new tscap golden format Kristoffer Dalby 2026-04-09 06:18:43 +00:00
  • ce81ab2a2f servertest: align via grant compat test with new tscap golden format Kristoffer Dalby 2026-04-09 06:18:43 +00:00
  • c0fd9b60ed mapper, db: drop redundant zerolog SetGlobalLevel calls in tests Kristoffer Dalby 2026-04-08 20:50:15 +00:00
  • b83e30c090 mapper, db: drop redundant zerolog SetGlobalLevel calls in tests Kristoffer Dalby 2026-04-08 20:50:15 +00:00
  • d3a6afdbf0 hscontrol/types: silence zerolog by default in tests Kristoffer Dalby 2026-04-08 20:49:47 +00:00
  • 3fa4e2dafe hscontrol/types: silence zerolog by default in tests Kristoffer Dalby 2026-04-08 20:49:47 +00:00
  • 800fed8d50 testdata: replace with multi-user tscap output Kristoffer Dalby 2026-04-08 15:28:23 +00:00
  • 8703aa0bab testdata: replace with multi-user tscap output Kristoffer Dalby 2026-04-08 15:28:23 +00:00
  • 6ae182696f state: fix policy change race in UpdateNodeFromMapRequest Kristoffer Dalby 2026-03-11 08:09:08 +00:00
  • ccddeceeec state: fix GORM not persisting user_id=NULL on tagged node conversion Kristoffer Dalby 2026-04-08 08:42:50 +00:00
  • 580dcad683 hscontrol: add tests for SetTags user_id database persistence Kristoffer Dalby 2026-04-08 08:42:50 +00:00
  • dd57fecb1f Deployed 442fcdbd to development with MkDocs 1.6.1 and mike 2.1.4 github-actions 2026-04-08 12:00:59 +00:00
  • 442fcdbd33 capver: regenerate for tailscale v1.96 Kristoffer Dalby 2026-04-08 11:20:16 +00:00
  • 380f531342 state: trigger PolicyChange on every Connect and Disconnect Kristoffer Dalby 2026-04-08 10:31:54 +00:00
  • 51eed414b4 integration: fix ACL tests for address-family-specific resolve Kristoffer Dalby 2026-04-08 10:31:35 +00:00
  • e638cbc9b9 integration/tsic: accept via peer-relay in non-direct ping check Kristoffer Dalby 2026-04-08 10:31:08 +00:00
  • 6390fcee79 Dockerfile: bump tailscale HEAD builder to Go 1.26.2 Kristoffer Dalby 2026-04-08 10:30:52 +00:00
  • b52f8cb52f CHANGELOG: document node.expiry and oidc.expiry deprecation Kristoffer Dalby 2026-04-02 20:43:09 +00:00
  • ff29af63f6 servertest: use memnet networking and add WithNodeExpiry option Kristoffer Dalby 2026-04-02 09:19:05 +00:00
  • 7e8930c507 hscontrol: add tests for default node key expiry Kristoffer Dalby 2026-03-01 22:54:10 +00:00
  • 6337a3dbc4 state: apply default node key expiry on registration Kristoffer Dalby 2026-03-01 22:53:55 +00:00
  • 4d0b273b90 types: add node.expiry config, deprecate oidc.expiry Kristoffer Dalby 2026-03-01 22:53:26 +00:00
  • 818a8eb8e3 compat tests: build node topology per-scenario, not globally Kristoffer Dalby 2026-04-08 11:35:11 +00:00
  • 4005a097e9 compat tests: build node topology per-scenario, not globally Kristoffer Dalby 2026-04-08 11:35:11 +00:00
  • 9e96adfa49 testdata: replace legacy captures with anonymized tscap output Kristoffer Dalby 2026-04-08 11:29:41 +00:00
  • b7da0c403c testdata: replace legacy captures with anonymized tscap output Kristoffer Dalby 2026-04-08 11:29:41 +00:00
  • 9f5e49d3ee compat tests: switch to anonymized norse-god + pokemon names Kristoffer Dalby 2026-04-08 08:21:31 +00:00
  • 76c7cb3342 compat tests: switch to anonymized norse-god + pokemon names Kristoffer Dalby 2026-04-08 08:21:31 +00:00
  • d1bd6e5b88 testcapture: add capture format package and rewire compat tests Kristoffer Dalby 2026-04-08 08:05:45 +00:00
  • e30de58627 testcapture: add capture format package and rewire compat tests Kristoffer Dalby 2026-04-08 08:05:45 +00:00
  • f213a8c22a policy/v2: build ACL compat nodes from golden file topology Kristoffer Dalby 2026-04-06 08:15:49 +00:00
  • 211da43f57 policy/v2: build ACL compat nodes from golden file topology Kristoffer Dalby 2026-04-06 08:15:49 +00:00
  • 6a8a0b4b14 testdata: recapture all golden files with 19-node tailnet and netmap Kristoffer Dalby 2026-04-06 08:07:07 +00:00
  • c504f891cf testdata: recapture all golden files with 19-node tailnet and netmap Kristoffer Dalby 2026-04-06 08:07:07 +00:00
  • 78926fbde4 fix: scope DestroyUser to only delete target user's pre-auth keys v0.28-fix Jacky 2026-04-05 14:24:01 +09:00
  • 2469c3eb80 policy/v2: remove obsolete global vs per-node equivalence tests Kristoffer Dalby 2026-04-04 16:06:44 +00:00
  • ff16af0d6e policy/v2: remove obsolete global vs per-node equivalence tests Kristoffer Dalby 2026-04-04 16:06:44 +00:00
  • 3065b45310 policy/v2: make ACL error validation strict Kristoffer Dalby 2026-04-04 13:21:05 +00:00
  • b2f7d66686 policy/v2: make ACL error validation strict Kristoffer Dalby 2026-04-04 13:21:05 +00:00
  • d77ce3582d policy: document CanAccessRoute and filterForNodeLocked design Kristoffer Dalby 2026-04-04 13:20:45 +00:00
  • 4dedb70818 policy: document CanAccessRoute and filterForNodeLocked design Kristoffer Dalby 2026-04-04 13:20:45 +00:00
  • bbea92033c policy/v2: wire PolicyManager through compiledGrant, delete old paths Kristoffer Dalby 2026-04-04 13:18:15 +00:00
  • 6e3a03ab54 policy/v2: wire PolicyManager through compiledGrant, delete old paths Kristoffer Dalby 2026-04-04 13:18:15 +00:00
  • ac8f9c7ecc policyutil: fix reduceCapGrantRule and add reduction tests Kristoffer Dalby 2026-04-03 09:32:42 +00:00
  • f2664e434e policyutil: fix reduceCapGrantRule and add reduction tests Kristoffer Dalby 2026-04-03 09:32:42 +00:00
  • 6e5508444f policy/v2: add false-positive peer test for all 98 golden files Kristoffer Dalby 2026-04-03 09:29:35 +00:00
  • d092e4b325 policy/v2: add false-positive peer test for all 98 golden files Kristoffer Dalby 2026-04-03 09:29:35 +00:00
  • 8754ed10dc policy/v2: add global vs per-node filter compilation equivalence tests Kristoffer Dalby 2026-04-03 09:23:21 +00:00
  • c22bddfe83 policy/v2: add global vs per-node filter compilation equivalence tests Kristoffer Dalby 2026-04-03 09:23:21 +00:00
  • db8ac49680 servertest: improve via compat test infrastructure Kristoffer Dalby 2026-04-03 09:22:22 +00:00
  • 782c367ee4 servertest: improve via compat test infrastructure Kristoffer Dalby 2026-04-03 09:22:22 +00:00
  • 8a3a4af03d policy/matcher: add unit tests for matcher package Kristoffer Dalby 2026-04-03 09:16:48 +00:00
  • 471b9bbdbb policy/matcher: add unit tests for matcher package Kristoffer Dalby 2026-04-03 09:16:48 +00:00
  • bbcbcd3ea5 policy/v2: add auto-approval and route access compat tests Kristoffer Dalby 2026-04-03 07:26:23 +00:00
  • f5a0493886 policy/v2: add auto-approval and route access compat tests Kristoffer Dalby 2026-04-03 07:26:23 +00:00
  • 85a03db016 policy/v2: add peer visibility compat tests for subnet-to-subnet ACLs Kristoffer Dalby 2026-04-02 16:18:37 +00:00
  • 8addacb06a policy/v2: add peer visibility compat tests for subnet-to-subnet ACLs Kristoffer Dalby 2026-04-02 16:18:37 +00:00
  • cfcc6e4615 Deployed 23a5f1b6 to development with MkDocs 1.6.1 and mike 2.1.4 github-actions 2026-04-02 19:25:06 +00:00
  • 23a5f1b628 Use pymdownx.magiclink with its default configuration Florian Preinstorfer 2026-03-29 16:51:06 +02:00
  • 44600550c6 Fix invisible selected menu item Florian Preinstorfer 2026-03-29 16:41:46 +02:00
  • 34fd7d00ea testdata: add subnet-to-subnet route compatibility golden files Kristoffer Dalby 2026-04-02 16:01:40 +00:00
  • 798c8a9edb testdata: add subnet-to-subnet route compatibility golden files Kristoffer Dalby 2026-04-02 16:01:40 +00:00
  • 232a9c8f9a integration: add subnet-to-subnet ACL routing test Ubuntu 2026-04-02 13:25:34 +00:00
  • f37401e9bc integration: add subnet-to-subnet ACL routing test Ubuntu 2026-04-02 13:25:34 +00:00
  • ea85dcbc14 types: consider subnet routes as source identity in ACL matching Ubuntu 2026-04-02 13:23:23 +00:00
  • 1883f5022e types: consider subnet routes as source identity in ACL matching Ubuntu 2026-04-02 13:23:23 +00:00
  • 45d5544736 types,policy: add tests for subnet-to-subnet route visibility Ubuntu 2026-04-02 13:23:14 +00:00
  • 9210e597b1 types,policy: add tests for subnet-to-subnet route visibility Ubuntu 2026-04-02 13:23:14 +00:00
  • 835db974b5 testdata: strip unused fields from all test data files (23MB -> 4MB) Kristoffer Dalby 2026-03-30 17:10:53 +00:00
  • 30dce30a9d testdata: convert .json to .hujson with header comments Kristoffer Dalby 2026-03-30 17:08:26 +00:00
  • f693cc0851 CHANGELOG: document grants support for 0.29.0 Kristoffer Dalby 2026-03-24 06:44:52 +00:00
  • abd2b15db5 policy/v2: clean up dead error variables, stale TODO, and test skip reasons Kristoffer Dalby 2026-03-30 13:15:09 +00:00
  • b762e4c350 integration: remove exit node via grant tests Kristoffer Dalby 2026-03-29 06:08:06 +00:00
  • c36cedc32f policy/v2: fix via grants in BuildPeerMap, MatchersForNode, and ViaRoutesForPeer Kristoffer Dalby 2026-03-28 12:48:19 +00:00
  • 6a55f7d731 policy/v2: add via exit steering golden captures and tests Kristoffer Dalby 2026-03-28 11:05:16 +00:00
  • bca6e6334d integration: add custom subnet support and fix exit node tests Kristoffer Dalby 2026-03-26 21:33:48 +00:00
  • 0431039f2a servertest: add regression tests for via grant filter rules Kristoffer Dalby 2026-03-26 06:03:55 +00:00
  • ccd284c0a5 policy/v2: use per-node filter compilation for via grants Kristoffer Dalby 2026-03-26 06:03:28 +00:00