3573 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Kristoffer Dalby	e68e2288f7	gen: test-integration (#2814)	2025-10-24 17:22:53 +02:00
Kristoffer Dalby	c808587de0	cli: do not show new pre-releases on stable (#2813)	2025-10-24 13:15:53 +02:00
Kristoffer Dalby	2bf1200483	policy: fix autogroup:self propagation and optimize cache invalidation (#2807) v0.27.0-beta.2	2025-10-23 17:57:41 +02:00
Kristoffer Dalby	66826232ff	integration: add tests for api bypass (#2811)	2025-10-22 16:30:25 +02:00
Kristoffer Dalby	1cdea7ed9b	stricter hostname validation and replace (#2383)	2025-10-22 13:50:39 +02:00
Elyas Asmad	2c9e98d3f5	fix: guard every error statement with early return (#2810)	2025-10-22 13:48:07 +02:00
Florian Preinstorfer	8becb7e54a	Mention explicitly that @ is only required in policy	2025-10-21 14:28:03 +02:00
Florian Preinstorfer	ed38d00aaa	Fix autogroup:self alternative example ... Also indent and split the comment into two lines to avoid horizontal scrolling.	2025-10-21 14:28:03 +02:00
Florian Preinstorfer	8010cc574e	Remove outdated hint about an empty config file	2025-10-19 17:14:15 +02:00
Juanjo Presa	c97d0ff23d	Fix fatal error on missing config file by handling viper.ConfigFileNotFoundError ... Correctly identify Viper's ConfigFileNotFoundError in LoadConfig to log a warning and use defaults, unifying behavior with empty config files. Fixes fatal error when no config file is present for CLI commands relying on environment variables.	2025-10-19 15:29:47 +02:00
Florian Preinstorfer	047dbda136	Add FAQ on how to disable log submission ... Fixes: #2793	2025-10-19 08:24:23 +02:00
Florian Preinstorfer	2a1392fb5b	Add healthcheck to container docs	2025-10-19 08:22:30 +02:00
Florian Preinstorfer	46477b8021	Downgrade completed broadcast message to debug	2025-10-18 07:56:59 +02:00
Kristoffer Dalby	c87471136b	integration: eventually fixups (#2799) v0.27.0-beta.1	2025-10-17 08:28:30 +02:00
Kristoffer Dalby	e7a28a14af	changelog: prepare for 0.27.0 (#2797)	2025-10-16 19:04:07 +02:00
Kristoffer Dalby	4912769ab3	update dependencies (#2798)	2025-10-16 19:03:30 +02:00
Stavros Kois	c07cc491bf	add health command (#2659) ... * add health command * update health check implementation to allow for more checks to added over time * add change changelog entry	2025-10-16 12:00:11 +00:00
Vitalij Dovhanyc	c2a58a304d	feat: add autogroup:self (#2789)	2025-10-16 12:59:52 +02:00
Kristoffer Dalby	fddc7117e4	stability and race conditions in auth and node store (#2781) ... This PR addresses some consistency issues that was introduced or discovered with the nodestore. nodestore: Now returns the node that is being put or updated when it is finished. This closes a race condition where when we read it back, we do not necessarily get the node with the given change and it ensures we get all the other updates from that batch write. auth: Authentication paths have been unified and simplified. It removes a lot of bad branches and ensures we only do the minimal work. A comprehensive auth test set has been created so we do not have to run integration tests to validate auth and it has allowed us to generate test cases for all the branches we currently know of. integration: added a lot more tooling and checks to validate that nodes reach the expected state when they come up and down. Standardised between the different auth models. A lot of this is to support or detect issues in the changes to nodestore (races) and auth (inconsistencies after login and reaching correct state) This PR was assisted, particularly tests, by claude code.	2025-10-16 12:17:43 +02:00
Florian Preinstorfer	881a6b9227	The sequential prefix allocation uses a best-effort approach ... Fixes: #2682	2025-10-15 17:07:13 +02:00
yckwan	3fbde7a1b6	Update official.md ... in the step 5 file default value is [line11] ExecStart=/usr/bin/headscale serve	2025-10-13 17:06:56 +02:00
Andrey Bobelev	c4a8c038cd	fix: return valid AuthUrl in followup request on expired reg id ... - tailscale client gets a new AuthUrl and sets entry in the regcache - regcache entry expires - client doesn't know about that - client always polls followup request а gets error When user clicks "Login" in the app (after cache expiry), they visit invalid URL and get "node not found in registration cache". Some clients on Windows for e.g. can't get a new AuthUrl without restart the app. To fix that we can issue a new reg id and return user a new valid AuthUrl. RegisterNode is refactored to be created with NewRegisterNode() to autocreate channel and other stuff.	2025-10-11 05:57:39 +02:00
Andrey Bobelev	022098fe4e	chore: make reg cache expiry tunable ... Mostly for the tests, opts: - tuning.register_cache_expiration - tuning.register_cache_cleanup	2025-10-11 05:57:39 +02:00
Florian Preinstorfer	bd35fcf338	Add FAQ entry about policy migration in the database	2025-09-17 16:32:29 +02:00
Florian Preinstorfer	2d680b5ebb	Misc typos and spelling	2025-09-17 16:32:29 +02:00
Kristoffer Dalby	ed3a9c8d6d	mapper: send change instead of full update (#2775)	2025-09-17 14:23:21 +02:00
Kristoffer Dalby	4de56c40d8	flake: goreleaser doesnt follow go nix convention (#2779)	2025-09-17 09:41:05 +02:00
github-actions[bot]	40b3d54c1f	flake.lock: Update (#2755)	2025-09-14 16:15:51 +00:00
Florian Preinstorfer	30d12dafed	Add FAQ entry about the recommended upgrade path	2025-09-13 08:15:01 +02:00
Kristoffer Dalby	2b30a15a68	cmd: add option to get and set policy directly from database (#2765)	2025-09-12 16:55:15 +02:00
Kristoffer Dalby	2938d03878	policy: reject unsupported fields (#2764)	2025-09-12 14:47:56 +02:00
Kristoffer Dalby	1b1c989268	{policy, node}: allow return paths in route reduction (#2767)	2025-09-12 11:47:51 +02:00
Kristoffer Dalby	3950f8f171	cli: use gobuild version handling (#2770)	2025-09-12 11:47:31 +02:00
Kristoffer Dalby	ee0ef396a2	policy: fix ssh usermap, fixing autogroup:nonroot (#2768)	2025-09-12 09:12:30 +02:00
Kristoffer Dalby	7056fbb63b	derp: fix flaky shuffle test (#2772)	2025-09-11 13:49:02 +00:00
Kristoffer Dalby	c91b9fc761	poll: add missing godoc (#2763)	2025-09-11 14:15:19 +02:00
Kristoffer Dalby	d41fb4d540	app: fix sigint hanging ... When the node notifier was replaced with batcher, we removed its closing, but forgot to add the batchers so it was never stopping node connections and waiting forever. Fixes #2751 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-11 11:53:26 +02:00
Kristoffer Dalby	01c1f6f82a	policy: validate error message for asterix in ssh (#2766)	2025-09-10 18:41:43 +02:00
Oleksii Samoliuk	3f6657ae57	fix: documentation	2025-09-09 20:54:47 +02:00
Kristoffer Dalby	0512f7c57e	.github/ISSUE_TEMPLATE: add node number to environment ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 19:04:23 +02:00
Florian Preinstorfer	c6427aa296	Use group id instead of group name for Entra ID	2025-09-09 12:23:34 +02:00
Florian Preinstorfer	4e6d42d5bd	Keycloak's group format is configurable	2025-09-09 12:23:34 +02:00
Florian Preinstorfer	8ff5baadbe	Refresh OIDC docs ... The UserInfo endpoint is always queried since 5d8a2c2. This allows to use all OIDC related features without any extra configuration on Authelia. For Keycloak, its sufficient to add the groups mapper to the userinfo endpoint.	2025-09-09 12:23:34 +02:00
Florian Preinstorfer	2f3c365b68	Describe how to remove a DERP region ... Add documentation for d29feaef. Fixes: #2450	2025-09-09 11:05:30 +02:00
Kristoffer Dalby	4893cdac74	integration: make timestamp const ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	476f30ab20	state: ensure netinfo is preserved and not removed ... the client will send a lot of fields as `nil` if they have not changed. NetInfo, which is inside Hostinfo, is one of those fields and we often would override the whole hostinfo meaning that we would remove netinfo if it hadnt changed. Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	233dffc186	lint and leftover ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	39443184d6	gen: new proto version ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	0303b76e1f	postgres uses more memory ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	684239e015	cmd/mapresponses: add mini tool to inspect mapresp state from integration ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00