Kristoffer Dalby
201f81ce00
Make sure mockoidc is up, has unique name and removed if exist
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-10-07 23:56:27 +02:00
Kristoffer Dalby
4904ccc3c3
Make sure mock container is removed before started
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-10-07 23:56:27 +02:00
Kristoffer Dalby
6b67584d47
Fix DERP name in integration tests
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-10-07 23:56:26 +02:00
Kristoffer Dalby
81dd9b2386
format
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-26 11:34:04 +02:00
Kristoffer Dalby
9088521252
Move lets enc listener into go routine
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-26 11:33:48 +02:00
Kristoffer Dalby
fc6a1e15fc
Revert overlay overlapping
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-26 11:13:42 +02:00
Kristoffer Dalby
94be5ca295
Nix update
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-26 10:50:41 +02:00
Kristoffer Dalby
804d9d8196
Format nix with alejandra
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-26 10:48:59 +02:00
Kristoffer Dalby
d0e945fdd7
_ unused variable
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-26 10:48:37 +02:00
Kristoffer Dalby
98e7842c26
Add nix overlay to flake
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-26 10:47:49 +02:00
Kristoffer Dalby
24629895c7
Add new config option to cli integration tests
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-26 10:14:46 +02:00
Kristoffer Dalby
256b6cb54d
Add new option to config-example
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-26 10:01:15 +02:00
Kristoffer Dalby
6b4d53315b
Update changelog
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-26 10:01:01 +02:00
Kristoffer Dalby
fb25a06a66
Preserve current behaviour with a config flag
...
Add a configuration flag (default true to preserve current behaviour) to
allow headscale to start without OIDC being able to initialise.
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-26 09:57:28 +02:00
Kristoffer Dalby
dbe58e53e4
Allow headscale to start if oidc setup fails.
...
This commit makes headscale fall back to CLI authentication if oidc
fails to initialised and posts a warning to users.
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-26 09:52:32 +02:00
Kristoffer Dalby
8dcc82ceb3
Use oidc if it initialised, not if it is configured
...
OIDC might be configured, but unable to be initialised, this only runs
the oidc cycle if it is actually successfully set up/initialised.
Prep for next commit
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-26 09:51:23 +02:00
Kristoffer Dalby
8be14ef6fe
gofumpt
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-23 11:53:42 +02:00
Kristoffer Dalby
2bb34751d1
Validate the incoming nodekey with regex before attempting to parse
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-23 11:53:42 +02:00
Kristoffer Dalby
75a8fc8b3e
Update changelog
...
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-23 10:44:29 +02:00
Kristoffer Dalby
93082b8092
Protect against user injection for registration CLI page
...
This commit addresses a potential issue where we allowed unsanitised
content to be passed through a go template without validation.
We now try to unmarshall the incoming node key and fails to render the
template if it is not a valid node key.
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com >
2022-09-23 10:39:42 +02:00
Kristoffer Dalby