1eabd70567
docs: add v1-ogen migration plan and changelog
2026-06-19 05:57:04 +00:00
562fcc1401
hscontrol: serve v1 API via ogen, replace grpc-gateway facade
...
Mount the ogen-generated server at /api/v1 with bearer-auth and RFC 7807
errors backed by the state layer; gRPC servers stay for the CLI. Add a
servertest API client harness and Health parity tests.
2026-06-19 05:57:03 +00:00
01dcd4011e
gen: generate v1 API server and client with ogen
...
go generate (gen/api/v1) runs ogen against openapi/v1/headscale.yaml; ogen
added as a tool dependency. CI freshness check covers openapi/.
2026-06-19 05:57:03 +00:00
38dad226c8
openapi: add v1 API OpenAPI 3.0 specification
...
Single source of truth for the v1 HTTP API: 27 operations, native int64
ids, RFC 7807 problem responses, bearer auth.
2026-06-19 05:57:03 +00:00
a00de89c85
ci: run nix jobs with --fallback
...
cache.nixos.org intermittently serves corrupt NARs; build from source on
substitute failure instead of failing the job.
2026-06-18 21:11:14 +02:00
f5198841bd
ci: drop Docker v28 pin from release workflow
...
Engine 29 build compat is fixed in the client; the downgrade is no longer
needed.
2026-06-18 21:11:14 +02:00
dfc25f06e1
integration: pin docker client to daemon API version
...
dockertest's bundled client builds against API v1.25; Docker Engine 29
rejects it (min 1.40), surfacing as a "broken pipe" that fails every local
image build. Pin to the daemon's reported version so builds use a live path.
Closes #2937
2026-06-18 21:11:14 +02:00
74928c0241
integration: regenerate test matrix for new CLI tests
2026-06-18 15:21:11 +02:00
9aba06ec7d
integration: backfill CLI command coverage
...
Regroup the CLI tests into per-command files and cover every command
except debug/config with CRUD, flag and error permutations, asserted as
JSON.
2026-06-18 15:21:11 +02:00
00afce77b1
ci: run nixos module check with --fallback
...
cache.nixos.org intermittently serves corrupt NARs; build from source
on substitute failure instead of failing the job.
2026-06-18 14:54:44 +02:00
9f1886f587
db: preserve user_id on untagged nodes with tags='null'
...
A nil tags slice marshals to JSON `null`; the clear-tagged migration
read that as tagged and cleared user_id. Exclude it, and recover
already-detached nodes from their pre-auth key.
Fixes #3323
2026-06-18 14:54:44 +02:00
ea5165e325
util, db: generate key material as hex via tailscale rands
2026-06-17 16:12:19 +02:00
368b9e7edd
state: add regression test for NodeKey-rotation binding
2026-06-17 16:12:19 +02:00
abfd5c9236
types: reject port-bearing server_url under base_domain
2026-06-17 16:12:19 +02:00
e4cd846075
handlers: set verify Content-Type before writing the body
2026-06-17 16:12:19 +02:00
4b693a1320
oidc, types: validate pkce.method when OIDC is active
2026-06-17 16:12:19 +02:00
4f4e95fc80
all: adopt strings, errors, and os helpers
2026-06-17 16:12:19 +02:00
27468f944b
all: adopt maps and cmp helpers
2026-06-17 16:12:19 +02:00
ac725f27e4
all: adopt slices helpers
2026-06-17 16:12:19 +02:00
60f0544b78
dns, change, noise, auth, capver: misc consolidation
2026-06-17 16:12:19 +02:00
ea5e52f662
hi: consolidate doctor and stats helpers
2026-06-17 16:12:19 +02:00
722a2f1e18
integration, hsic, tsic, dockertestutil: consolidate container helpers
2026-06-17 16:12:19 +02:00
75b09cb991
servertest: consolidate harness helpers
2026-06-17 16:12:19 +02:00
0320b56911
oidc: consolidate cookie helpers and logging
2026-06-17 16:12:19 +02:00
62869f01d2
app: simplify TLS and auth setup
2026-06-17 16:12:19 +02:00
19d5d9deeb
derp: simplify DERP map handling
2026-06-17 16:12:19 +02:00
c3cfbf1cc0
grpcv1: share list-RPC response helpers
2026-06-17 16:12:19 +02:00
fdc7e26c8a
util: consolidate parsing and encoding helpers
2026-06-17 16:12:19 +02:00
45e6e90d11
types: consolidate DNS, identifier, and proto helpers
2026-06-17 16:12:19 +02:00
468f70a9e5
templates: consolidate shared page and component helpers
2026-06-17 16:12:19 +02:00
8c10a96921
hscontrol: consolidate debug-endpoint and template helpers
2026-06-17 16:12:19 +02:00
3979887d8d
mapper: consolidate builder and connection helpers
2026-06-17 16:12:19 +02:00
03e2d24c79
policy/v2, policy/matcher: consolidate alias and IP-set helpers
2026-06-17 16:12:19 +02:00
e6ef1dda4d
policy: consolidate cache-invalidation and evaluation helpers
2026-06-17 16:12:19 +02:00
145672f0b6
state: consolidate route-election and node helpers
2026-06-17 16:12:19 +02:00
77f289a627
db: consolidate IP allocation helpers
2026-06-17 16:12:19 +02:00
55b9e3cfda
db, sqliteconfig: consolidate query and config helpers
2026-06-17 16:12:19 +02:00
b56326427c
cli: consolidate output and table rendering
2026-06-17 16:12:19 +02:00
0b7c8aa270
cli: consolidate gRPC command helpers
2026-06-17 16:12:19 +02:00
b88a3cb7b2
servertest, hi, integration: remove dead test helpers
2026-06-17 16:12:19 +02:00
ed6596f9d7
policy, mapper, capver, hscontrol: remove dead code
2026-06-17 16:12:19 +02:00
f49f27adf8
db, sqliteconfig: remove dead and unreachable code
2026-06-17 16:12:19 +02:00
43ba20bebb
util: remove dead helpers and stale comments
2026-06-17 16:12:19 +02:00
c8bd4a0947
types: remove dead types, constants, and methods
2026-06-17 16:12:19 +02:00
84168fb90a
templates: remove dead style helpers and deprecated shims
2026-06-17 16:12:19 +02:00
b0c221f3a1
changelog: set 0.29 date
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2026-06-17 11:09:20 +02:00
68a6d3cf17
db: drop ambiguous machine-key getter, match precisely in test helper
...
The First()-by-machine-key getter returned an undefined node when a machine
key mapped to several nodes. It was used only by RegisterNodeForTest; match on
(machine_key, user_id) there instead and remove the getter.
Updates #3312
2026-06-15 20:29:15 +02:00
1689478485
state: return all nodes for a machine key, reject ambiguous ownership
...
Collapse the single-pick machine-key lookups onto GetNodesByMachineKeyAllUsers
so callers see every node sharing a machine key and reject the ambiguous or
impossible cases (tagged and user-owned coexistence; a tagged key with several
user-owned candidates) instead of mutating an arbitrarily-picked node.
Updates #3312
2026-06-15 20:29:15 +02:00
a1d3e98255
state: allow key expiry to be set on tagged nodes
...
Tagged nodes disable key expiry by default but can still have one set
explicitly, and changing tags leaves expiry unchanged, matching Tailscale.
Updates #3312
2026-06-15 20:29:15 +02:00
b83bf3f993
state: serialise registration per machine key
...
Concurrent registrations of one machine key each saw no existing node and
created their own, duplicating nodes and IPs. Hold a per-machine lock across
the find-then-create section.
Updates #3312
2026-06-15 20:29:15 +02:00
Kristoffer Dalby
Kristoffer Dalby