480 Commits

Author	SHA1	Message	Date
Kristoffer Dalby	6654142fbe	cmd/headscale: migrate tests from check.v1 to testify ... Convert config loading tests from gopkg.in/check.v1 Suite-based testing to standard Go tests with testify assert/require. Changes: - Remove Suite boilerplate (Test, Suite type, SetUpSuite, TearDownSuite) - Convert TestConfigFileLoading and TestConfigLoading to standalone tests - Replace check assertions with testify equivalents	2026-01-20 15:41:33 +01:00
Kristoffer Dalby	951fd5a8e7	cli: show Owner column in preauthkeys list ... Replace the Tags column with an Owner column that displays: - Tags (newline-separated) if the key has ACL tags - User name if the key is associated with a user - Dash (-) if neither is present This aligns the CLI output with the tags-as-identity model where preauthkeys can be created with either tags or user ownership.	2026-01-20 12:53:20 +01:00
Kristoffer Dalby	165c5f0491	cli: fix preauthkeys expire/delete argument validation ... The Args function incorrectly required positional arguments but the commands use --id flag. Move validation into Run function.	2026-01-20 12:53:20 +01:00
Kristoffer Dalby	1325fd8b27	cli,hscontrol: use ID-based preauthkey operations	2026-01-20 12:53:20 +01:00
Kristoffer Dalby	0516c0ec37	gen: regenerate protobuf code	2026-01-14 09:32:46 +01:00
Kristoffer Dalby	0bcfdc29ad	cmd/hi: enable concurrent test execution ... Remove the concurrent test prevention logic and update cleanup to use run ID-based isolation, allowing multiple tests to run simultaneously. Changes: - cleanup: Add killTestContainersByRunID() to clean only containers belonging to a specific run, add cleanupStaleTestContainers() to remove only stopped/exited containers without affecting running tests - docker: Remove RunningTestInfo, checkForRunningTests(), and related error types, update cleanupAfterTest() to use run ID-based cleanup - run: Remove Force flag and concurrent test prevention check The test runner now: - Allows multiple concurrent test runs on the same Docker daemon - Cleans only stale containers before tests (not running ones) - Cleans only containers with matching run ID after tests - Prints run ID and monitoring info for operator visibility	2026-01-09 12:34:16 +01:00
Kristoffer Dalby	c4600346f9	.github/workflows: prebuilt integration test artifacts (#2954) ... This PR restructures the integration tests and prebuilds all common assets used in all tests: Headscale and Tailscale HEAD image hi binary that is used to run tests go cache is warmed up for compilation of the test This essentially means we spend 6-10 minutes building assets before any tests starts, when that is done, all tests can just sprint through. It looks like we are saving 3-9 minutes per test, and since we are limited to running max 20 concurrent tests across the repo, that means we had a lot of double work. There is currently 113 checks, so we have to do five runs of 20, and the saving should be quite noticeable! I think the "worst case" saving would be 20+min and "best case" probably towards an hour.	2025-12-12 23:01:52 +01:00
Kristoffer Dalby	87bd67318b	golangci-lint: use forbidigo to block time.Sleep (#2946)	2025-12-10 16:45:59 +00:00
Kristoffer Dalby	0e1673041c	all: remove deadcode (#2952)	2025-12-10 15:55:15 +01:00
Kristoffer Dalby	f3f2d30004	cli: better formatting of lists (#2951)	2025-12-10 12:33:21 +01:00
Rogan Lynch	5d0a6ab0e9	fix: list-routes command now respects identifier filter with JSON output ... Fixes #2927 In v0.27.0, the list-routes command with -i flag and -o json output was returning all nodes instead of just the specified node. The issue was that JSON output was happening before the identifier filtering logic. This change moves the JSON output to after both the identifier filter and route existence filter are applied, ensuring the correct filtered results are returned. This restores the v0.26.1 behavior where: headscale nodes list-routes -i 12 -o json correctly returns only node 12's route information.	2025-12-10 06:19:17 +01:00
Kristoffer Dalby	3cf2d7195a	auth: ensure machines are allowed in when pak change (#2917)	2025-12-02 12:01:02 +01:00
Kristoffer Dalby	16d811b306	cli: remove node move command (#2922)	2025-12-01 21:43:31 +01:00
Kristoffer Dalby	eec196d200	modernize: run gopls modernize to bring up to 1.25 (#2920)	2025-12-01 19:40:25 +01:00
Kristoffer Dalby	bfcd9d261d	cmd/hi: reject if we are already running (#2919)	2025-12-01 19:40:08 +01:00
Kristoffer Dalby	ed78bf4b98	cmd/hi: improve test cleanup to reduce CI disk usage (#2881)	2025-11-28 16:59:54 +01:00
Kristoffer Dalby	da9018a0eb	types: make pre auth key use bcrypt (#2853)	2025-11-12 16:36:36 +01:00
Kristoffer Dalby	02c7c1a0e7	cli: only validate bypass-grpc set policy (#2854)	2025-11-02 09:42:59 +00:00
Andrey	f9bb88ad24	expire nodes with a custom timestamp (#2828)	2025-11-01 08:09:13 +01:00
Kristoffer Dalby	c808587de0	cli: do not show new pre-releases on stable (#2813)	2025-10-24 13:15:53 +02:00
Kristoffer Dalby	2bf1200483	policy: fix autogroup:self propagation and optimize cache invalidation (#2807)	2025-10-23 17:57:41 +02:00
Kristoffer Dalby	4912769ab3	update dependencies (#2798)	2025-10-16 19:03:30 +02:00
Stavros Kois	c07cc491bf	add health command (#2659) ... * add health command * update health check implementation to allow for more checks to added over time * add change changelog entry	2025-10-16 12:00:11 +00:00
Kristoffer Dalby	2b30a15a68	cmd: add option to get and set policy directly from database (#2765)	2025-09-12 16:55:15 +02:00
Kristoffer Dalby	3950f8f171	cli: use gobuild version handling (#2770)	2025-09-12 11:47:31 +02:00
Kristoffer Dalby	684239e015	cmd/mapresponses: add mini tool to inspect mapresp state from integration ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	9d236571f4	state/nodestore: in memory representation of nodes ... Initial work on a nodestore which stores all of the nodes and their relations in memory with relationship for peers precalculated. It is a copy-on-write structure, replacing the "snapshot" when a change to the structure occurs. It is optimised for reads, and while batches are not fast, they are grouped together to do less of the expensive peer calculation if there are many changes rapidly. Writes will block until commited, while reads are never blocked. Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	3326c5b7ec	cmd/hi: lint and format ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-09-09 09:40:00 +02:00
Kristoffer Dalby	8e25f7f9dd	bunch of qol (#2748)	2025-08-27 17:09:13 +02:00
Jeff Emershaw	b4f7782fd8	support force flag for nodes backfillips	2025-08-10 13:31:24 +02:00
Kristoffer Dalby	a058bf3cd3	mapper: produce map before poll (#2628)	2025-07-28 11:15:53 +02:00
Kristoffer Dalby	c6d7b512bd	integration: replace time.Sleep with assert.EventuallyWithT (#2680)	2025-07-10 23:38:55 +02:00
Kristoffer Dalby	73023c2ec3	all: use immutable node view in read path ... This commit changes most of our (*)types.Node to types.NodeView, which is a readonly version of the underlying node ensuring that there is no mutations happening in the read path. Based on the migration, there didnt seem to be any, but the idea here is to prevent it in the future and simplify other new implementations. Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-07-07 21:28:59 +01:00
Kristoffer Dalby	c6736dd6d6	db: add sqlite "source of truth" schema ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-07-07 15:48:38 +01:00
Kristoffer Dalby	afc11e1f0c	cmd/hi: fixes and qol (#2649)	2025-06-23 13:43:14 +02:00
Kristoffer Dalby	ea7376f522	cmd/hi: add integration test runner CLI tool (#2648) ... * cmd/hi: add integration test runner CLI tool Add a new CLI tool 'hi' for running headscale integration tests with Docker automation. The tool replaces manual Docker command composition with an automated solution. Features: - Run integration tests in golang:1.24 containers - Docker context detection (supports colima and other contexts) - Test isolation with unique run IDs and isolated control_logs - Automatic Docker image pulling and container management - Comprehensive cleanup operations for containers, networks, images - Docker volume caching for Go modules - Verbose logging and detailed test artifact reporting - Support for PostgreSQL/SQLite selection and various test flags Usage: go run ./cmd/hi run TestPingAllByIP --verbose The tool uses creachadair/command and flax for CLI parsing and provides cleanup subcommands for Docker resource management. Updates flake.nix vendorHash for new Go dependencies. * ci: update integration tests to use hi CLI tool Replace manual Docker command composition in GitHub Actions workflow with the new hi CLI tool for running integration tests. Changes: - Replace complex docker run command with simple 'go run ./cmd/hi run' - Remove manual environment variable setup (handled by hi tool) - Update artifact paths for new timestamped log directory structure - Simplify command from 15+ lines to 3 lines - Maintain all existing functionality (postgres/sqlite, timeout, test patterns) The hi tool automatically handles Docker context detection, container management, volume mounting, and environment variable setup that was previously done manually in the workflow. * makefile: remove test integration Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> --------- Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-06-18 11:22:15 +02:00
jasonrepos	62b489dc68	fix: change FormatUint base from 64 to 10 in preauthkeys list command (#2588)	2025-05-13 18:40:17 +00:00
Kristoffer Dalby	43943aeee9	bring back last_seen in database (#2579) ... * db: add back last_seen to the database Fixes #2574 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * integration: ensure last_seen is set Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> --------- Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-05-10 09:49:08 +02:00
Kristoffer Dalby	377b854dd8	cli: policy check, dont require config or log (#2580) ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-05-09 23:19:47 +02:00
Kristoffer Dalby	93afb03f67	cmd: add policy check command (#2553)	2025-05-02 13:58:30 +03:00
Kristoffer Dalby	a4a203b9a3	cli/nodes: filter nodes without any routes (#2551)	2025-05-01 13:27:54 +03:00
Kristoffer Dalby	6b6509eeeb	notify nodes after owner change (#2543) ... * proto: user id as identifier for move node Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * gen: regenr Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * grpc: move, use userid, one tx, send update Updates #2467 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * integration: update move cli tests Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> --------- Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-04-30 18:33:38 +02:00
Kristoffer Dalby	8f9fbf16f1	types/authkey: include user object in response (#2542) ... * types/authkey: include user object, not string Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * make preauthkeys use id Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * changelog Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * integration: wire up user id for auth keys Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> --------- Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-04-30 11:45:08 +02:00
Kristoffer Dalby	cbc99010f0	populate serving from primary routes (#2489) ... * populate serving from primary routes Depends on #2464 Fixes #2480 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * also exit Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * fix route update outside of connection there was a bug where routes would not be updated if they changed while a node was connected and it was not part of an autoapprove. Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * update expected test output, cli only shows service node Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> --------- Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-03-28 13:22:15 +01:00
Florian Preinstorfer	29ba29478b	Add usage example to routes flag	2025-03-10 16:52:29 +01:00
Kristoffer Dalby	7891378f57	Redo route code (#2422) ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-02-26 16:22:55 +01:00
badsmoke	c61fbe9c5f	activate json logs (#2424) ... Co-authored-by: jan.sulimma <jan.sulimma@zigpos.com>	2025-02-12 15:31:24 +01:00
Kristoffer Dalby	3bf7d5a9c9	add git hash to binary, print on startup (#2415) ... * add git hash to binary, print on startup Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * update changelog Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> --------- Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2025-02-07 13:49:34 +01:00
Kristoffer Dalby	d57a55c024	Rewrite authentication flow (#2374)	2025-02-01 09:16:51 +00:00
Kristoffer Dalby	4c8e847f47	use dedicated registration ID for auth flow (#2337)	2025-01-26 22:20:11 +01:00