Commit Graph

  • 97eff90ebe db: report a missing pre-auth key on expire and destroy Kristoffer Dalby 2026-06-19 06:11:52 +00:00
  • a00de89c85 ci: run nix jobs with --fallback Kristoffer Dalby 2026-06-18 14:41:38 +00:00
  • f5198841bd ci: drop Docker v28 pin from release workflow Kristoffer Dalby 2026-06-18 14:26:35 +00:00
  • dfc25f06e1 integration: pin docker client to daemon API version Kristoffer Dalby 2026-06-18 14:26:27 +00:00
  • 74928c0241 integration: regenerate test matrix for new CLI tests Kristoffer Dalby 2026-06-18 11:37:12 +00:00
  • 9aba06ec7d integration: backfill CLI command coverage Kristoffer Dalby 2026-06-18 11:37:06 +00:00
  • ffd81c2eac Deployed 636f660c to 0.29.1 with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-06-18 13:03:53 +00:00
  • a650025888 Deployed 00afce77 to development with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-06-18 12:55:51 +00:00
  • 00afce77b1 ci: run nixos module check with --fallback Kristoffer Dalby 2026-06-18 11:16:01 +00:00
  • 9f1886f587 db: preserve user_id on untagged nodes with tags='null' Kristoffer Dalby 2026-06-18 08:32:06 +00:00
  • 636f660caf db: preserve user_id on untagged nodes with tags='null' v0.29.1 Kristoffer Dalby 2026-06-18 08:32:06 +00:00
  • ea5165e325 util, db: generate key material as hex via tailscale rands Kristoffer Dalby 2026-06-15 10:03:35 +00:00
  • 368b9e7edd state: add regression test for NodeKey-rotation binding Kristoffer Dalby 2026-06-15 06:18:54 +00:00
  • abfd5c9236 types: reject port-bearing server_url under base_domain Kristoffer Dalby 2026-06-16 14:03:39 +00:00
  • e4cd846075 handlers: set verify Content-Type before writing the body Kristoffer Dalby 2026-06-16 08:29:20 +00:00
  • 4b693a1320 oidc, types: validate pkce.method when OIDC is active Kristoffer Dalby 2026-06-15 10:14:35 +00:00
  • 4f4e95fc80 all: adopt strings, errors, and os helpers Kristoffer Dalby 2026-06-16 08:51:58 +00:00
  • 27468f944b all: adopt maps and cmp helpers Kristoffer Dalby 2026-06-16 08:30:16 +00:00
  • ac725f27e4 all: adopt slices helpers Kristoffer Dalby 2026-06-16 06:57:11 +00:00
  • 60f0544b78 dns, change, noise, auth, capver: misc consolidation Kristoffer Dalby 2026-06-16 06:56:10 +00:00
  • ea5e52f662 hi: consolidate doctor and stats helpers Kristoffer Dalby 2026-06-15 09:57:00 +00:00
  • 722a2f1e18 integration, hsic, tsic, dockertestutil: consolidate container helpers Kristoffer Dalby 2026-06-16 07:06:21 +00:00
  • 75b09cb991 servertest: consolidate harness helpers Kristoffer Dalby 2026-06-16 07:52:38 +00:00
  • 0320b56911 oidc: consolidate cookie helpers and logging Kristoffer Dalby 2026-06-16 08:54:20 +00:00
  • 62869f01d2 app: simplify TLS and auth setup Kristoffer Dalby 2026-06-16 12:25:37 +00:00
  • 19d5d9deeb derp: simplify DERP map handling Kristoffer Dalby 2026-06-16 07:04:42 +00:00
  • c3cfbf1cc0 grpcv1: share list-RPC response helpers Kristoffer Dalby 2026-06-16 12:28:53 +00:00
  • fdc7e26c8a util: consolidate parsing and encoding helpers Kristoffer Dalby 2026-06-16 07:53:29 +00:00
  • 45e6e90d11 types: consolidate DNS, identifier, and proto helpers Kristoffer Dalby 2026-06-16 06:58:30 +00:00
  • 468f70a9e5 templates: consolidate shared page and component helpers Kristoffer Dalby 2026-06-16 08:21:29 +00:00
  • 8c10a96921 hscontrol: consolidate debug-endpoint and template helpers Kristoffer Dalby 2026-06-16 09:00:19 +00:00
  • 3979887d8d mapper: consolidate builder and connection helpers Kristoffer Dalby 2026-06-16 11:33:35 +00:00
  • 03e2d24c79 policy/v2, policy/matcher: consolidate alias and IP-set helpers Kristoffer Dalby 2026-06-16 09:05:25 +00:00
  • e6ef1dda4d policy: consolidate cache-invalidation and evaluation helpers Kristoffer Dalby 2026-06-16 08:23:41 +00:00
  • 145672f0b6 state: consolidate route-election and node helpers Kristoffer Dalby 2026-06-16 07:00:35 +00:00
  • 77f289a627 db: consolidate IP allocation helpers Kristoffer Dalby 2026-06-16 12:09:44 +00:00
  • 55b9e3cfda db, sqliteconfig: consolidate query and config helpers Kristoffer Dalby 2026-06-16 08:45:11 +00:00
  • b56326427c cli: consolidate output and table rendering Kristoffer Dalby 2026-06-16 12:07:36 +00:00
  • 0b7c8aa270 cli: consolidate gRPC command helpers Kristoffer Dalby 2026-06-16 08:45:59 +00:00
  • b88a3cb7b2 servertest, hi, integration: remove dead test helpers Kristoffer Dalby 2026-06-15 09:52:08 +00:00
  • ed6596f9d7 policy, mapper, capver, hscontrol: remove dead code Kristoffer Dalby 2026-06-15 09:53:18 +00:00
  • f49f27adf8 db, sqliteconfig: remove dead and unreachable code Kristoffer Dalby 2026-06-15 10:10:18 +00:00
  • 43ba20bebb util: remove dead helpers and stale comments Kristoffer Dalby 2026-06-15 09:59:41 +00:00
  • c8bd4a0947 types: remove dead types, constants, and methods Kristoffer Dalby 2026-06-15 06:22:22 +00:00
  • 84168fb90a templates: remove dead style helpers and deprecated shims Kristoffer Dalby 2026-06-15 06:17:02 +00:00
  • d6b66d22f4 Deployed b0c221f3 to 0.29.0 with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-06-17 09:10:31 +00:00
  • bb37364bfb Deployed b0c221f3 to development with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-06-17 09:10:03 +00:00
  • b0c221f3a1 changelog: set 0.29 date v0.29.0 Kristoffer Dalby 2026-06-17 11:06:12 +02:00
  • ffc5736c8c Deployed 68a6d3cf to 0.29.0 with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-06-17 09:04:08 +00:00
  • 68a6d3cf17 db: drop ambiguous machine-key getter, match precisely in test helper v0.29.0-beta.4 Kristoffer Dalby 2026-06-15 14:43:37 +00:00
  • 1689478485 state: return all nodes for a machine key, reject ambiguous ownership Kristoffer Dalby 2026-06-15 14:43:37 +00:00
  • a1d3e98255 state: allow key expiry to be set on tagged nodes Kristoffer Dalby 2026-06-15 13:10:09 +00:00
  • b83bf3f993 state: serialise registration per machine key Kristoffer Dalby 2026-06-15 11:27:13 +00:00
  • 96d2e6ed60 state: roll back node store when re-registration write fails Kristoffer Dalby 2026-06-15 11:20:17 +00:00
  • 9b8949727d db: treat unknown pre-auth key as not found Kristoffer Dalby 2026-06-15 11:16:17 +00:00
  • bff216a184 state: update node in place on pre-auth-key re-registration Kristoffer Dalby 2026-06-15 11:13:34 +00:00
  • fd08b8fa8c state: make any-user machine-key lookup deterministic Kristoffer Dalby 2026-06-15 11:07:26 +00:00
  • a73d38bb3f state: reject re-registration claiming another node's key Kristoffer Dalby 2026-06-15 10:58:42 +00:00
  • e759d9fc90 auth: re-validate key when an expired node re-registers Kristoffer Dalby 2026-06-15 10:55:45 +00:00
  • 0961e79e16 state: re-register converted tagged nodes with reused key Kristoffer Dalby 2026-06-15 10:52:37 +00:00
  • a5ef3aff15 state: patch relogins and gate endpoint broadcasts Kristoffer Dalby 2026-06-15 08:18:59 +00:00
  • 4da06925d0 types/change: add NodeKeyRotated for relogin peer patch Kristoffer Dalby 2026-06-15 08:18:59 +00:00
  • 74a4dd5bb1 flake.lock: Update update_flake_lock_action github-actions[bot] 2026-06-14 01:00:22 +00:00
  • 21058d1142 flake, go.mod: refresh dependencies v0.29.0-beta.3 Kristoffer Dalby 2026-06-11 10:24:18 +00:00
  • c5f3d5c28d auth: clamp logout expiry to now Kristoffer Dalby 2026-06-11 09:43:29 +00:00
  • 40ed210521 policy: read pm.pol under the mutex Kristoffer Dalby 2026-06-10 13:42:15 +00:00
  • f4eeb94b1c mapper: gate broadcast sends until a connection's initial map is delivered Kristoffer Dalby 2026-06-10 13:42:05 +00:00
  • 7918187e7a servertest: add logout/relogin storm repro with poll churn Kristoffer Dalby 2026-06-10 12:21:16 +00:00
  • f497b4efd7 state, poll: refcount poll sessions, mark offline only on last release Kristoffer Dalby 2026-06-10 12:21:08 +00:00
  • 759381ad78 types: add ActiveSessions poll session refcount to Node Kristoffer Dalby 2026-06-10 12:20:58 +00:00
  • 71a4ce3c9f noise: re-delegate SSH check when the auth session is missing (#3306) kloba 2026-06-10 12:48:02 +03:00
  • f585f8a94d flake, go.mod: move to Go 1.26.4 and refresh dependencies Kristoffer Dalby 2026-06-09 10:23:23 +00:00
  • 88044f43ff hscontrol: satisfy golangci-lint on changed lines Kristoffer Dalby 2026-06-09 10:23:23 +00:00
  • 5e05652a78 mapper: derive incremental visibility from one shared filter Kristoffer Dalby 2026-06-08 11:58:05 +00:00
  • 020560fc5f policy: remove unused top-level BuildPeerMap Kristoffer Dalby 2026-06-08 11:58:05 +00:00
  • fad8f2a729 mapper: test incremental visibility matches full map Kristoffer Dalby 2026-06-08 11:58:05 +00:00
  • 0121083b53 test: assert NodeKey hijack is rejected on re-auth Kristoffer Dalby 2026-06-07 13:36:01 +00:00
  • 9fc88e308f noise: drop write-only nodeKey field to fix data race Kristoffer Dalby 2026-06-07 10:35:50 +00:00
  • c483bebba8 mapper: guard nil Hostinfo in addNextDNSMetadata Kristoffer Dalby 2026-06-07 07:37:50 +00:00
  • 4914f9f2fd state: reject re-auth claiming another machine's NodeKey Kristoffer Dalby 2026-06-07 07:35:17 +00:00
  • 8237ac662a mapper: filter incremental UserProfiles by ACL visibility Kristoffer Dalby 2026-06-07 04:34:01 +00:00
  • cd1c208980 mapper: filter peer-change patches by ACL visibility Kristoffer Dalby 2026-06-07 02:43:55 +00:00
  • 0fdff0c79b oidc: set SameSite=Lax on state/nonce CSRF cookies Kristoffer Dalby 2026-06-06 23:34:50 +00:00
  • eb57a3a62b state: reject registration claiming another machine's NodeKey Kristoffer Dalby 2026-06-06 20:42:02 +00:00
  • 56cd3eb24d policy: guard SSHCheckParams autogroup:self against nil User Kristoffer Dalby 2026-06-06 16:42:33 +00:00
  • 8f75ee5647 docker: head tailscale latest go Kristoffer Dalby 2026-06-06 12:42:55 +02:00
  • efdd9463e9 mapper: keep one batched bundle per node in flight to preserve order Kristoffer Dalby 2026-06-06 07:06:03 +00:00
  • a518a5076a state: batch route auto-approval into one policy rebuild Kristoffer Dalby 2026-06-06 07:06:03 +00:00
  • 2c9164b1c4 policy: precompute node routes in the peer-map build Kristoffer Dalby 2026-06-06 07:00:08 +00:00
  • 0e7b154617 mapper: register reconnecting node atomically against cleanup Kristoffer Dalby 2026-06-06 06:47:09 +00:00
  • ad2693ff13 mapper: record initial-map peers only after delivery Kristoffer Dalby 2026-06-05 15:31:34 +00:00
  • 7d845ef65e db: advance allocator cursor under lock during IP backfill Kristoffer Dalby 2026-06-05 15:31:34 +00:00
  • 9f0c74e73a dns: release lock before extra-records channel send Kristoffer Dalby 2026-06-05 15:19:27 +00:00
  • e413919810 derp: clone regions when merging DERP maps Kristoffer Dalby 2026-06-05 15:19:27 +00:00
  • 0921972f96 oidc: avoid slice panic in getCookieName for short values Kristoffer Dalby 2026-06-05 15:19:27 +00:00
  • 99ad555d64 db: handle degenerate prefixes in random IP allocation Kristoffer Dalby 2026-06-05 15:12:05 +00:00
  • 10696fa634 db: look up API keys by explicit primary key, not struct condition Kristoffer Dalby 2026-06-05 15:06:10 +00:00
  • 84c99023e5 util: check RNG error before slicing url-safe random string Kristoffer Dalby 2026-06-05 14:59:10 +00:00
  • ba54349176 util: handle single-address IPv4 prefix in reverse DNS generation Kristoffer Dalby 2026-06-05 14:59:10 +00:00
  • 08f186f22a state: skip database persist for keepalive-only map requests Kristoffer Dalby 2026-06-05 14:51:49 +00:00