Commit Graph

  • 4b79b03858 integration: reject failing sshTests at headscale policy set Kristoffer Dalby 2026-05-13 08:16:28 +00:00
  • 9e15565056 policy/v2: add sshtester captures from Tailscale SaaS Kristoffer Dalby 2026-05-12 21:04:58 +00:00
  • 6f93e3b010 policy/v2: add sshtester compat runner Kristoffer Dalby 2026-05-12 21:04:50 +00:00
  • 59755d496d policy/v2: evaluate sshTests at write boundary Kristoffer Dalby 2026-05-12 21:04:42 +00:00
  • 9205b02044 policy/v2: validate sshTests at parse Kristoffer Dalby 2026-05-12 21:04:34 +00:00
  • 5d502bfb88 types/node, mapper: strip own IPv4 from emission when node has disable-ipv4 cap Kristoffer Dalby 2026-05-13 09:58:11 +00:00
  • 64d13f77e8 types/config, types/node: model default-auto-update from auto_update.enabled Kristoffer Dalby 2026-05-11 16:28:09 +00:00
  • 408f4022e4 CHANGELOG: document nodeAttrs feature and migrations Kristoffer Dalby 2026-05-11 14:54:34 +00:00
  • 8ea4cd3faa types/node, policy/v2: drop taildrive caps from baseline emission Kristoffer Dalby 2026-05-11 14:54:03 +00:00
  • 5ebc53c29e types/node, mapper, policy/v2: assemble self CapMap inside TailNode Kristoffer Dalby 2026-05-11 14:53:09 +00:00
  • b3f795f0b4 mapper, policy/v2: stamp suggest-exit-node on Peer.CapMap when exit routes approved Kristoffer Dalby 2026-05-11 14:52:04 +00:00
  • 078b9e308f policy/v2: SaaS-derived compat tests for nodeAttrs Kristoffer Dalby 2026-05-11 14:51:09 +00:00
  • 3f73ed5404 config, types: move randomize_client_port from server config to policy file Kristoffer Dalby 2026-05-11 14:49:36 +00:00
  • 6fcff9e352 mapper, state: deliver nodeAttrs through MapResponse and harden nextdns DoH rewrite Kristoffer Dalby 2026-05-11 14:47:58 +00:00
  • a4f05b0962 policy/v2: parse, validate, and compile nodeAttrs Kristoffer Dalby 2026-05-11 14:46:38 +00:00
  • 48e22ab769 policy/v2: rewrite tag-name first-letter check via De Morgan sshtests-prerebase-1778675224 Kristoffer Dalby 2026-05-13 12:05:47 +00:00
  • d32d91d9fb policy/v2: accept bare-IP sshTests dst, reject only explicit CIDR Kristoffer Dalby 2026-05-13 10:56:24 +00:00
  • 9b4f68257d policy/v2: use Alias and SSHUser types in SSHPolicyTest Kristoffer Dalby 2026-05-13 10:45:03 +00:00
  • 63de6b2d38 CHANGELOG: rewrite sshTests entry to match policy tests style Kristoffer Dalby 2026-05-13 10:27:55 +00:00
  • 2499c066a3 policy/v2: drop useless comment on checkPeriod parse Kristoffer Dalby 2026-05-13 10:27:18 +00:00
  • 2ec7a71a56 policy/v2: match SaaS wording for group nesting rejection Kristoffer Dalby 2026-05-13 10:19:09 +00:00
  • 2e1d11adbf policy/v2: reject non-ASCII tag names Kristoffer Dalby 2026-05-13 10:11:55 +00:00
  • 51522195ef policy/v2: reject hosts-table aliases as SSH dst Kristoffer Dalby 2026-05-13 10:04:39 +00:00
  • 7e4be35cd2 policy/v2: tolerate tag-owner cycles by resolving to empty Kristoffer Dalby 2026-05-13 09:57:54 +00:00
  • c2d012cdf9 policy/v2: trim whitespace in SSH src and dst aliases Kristoffer Dalby 2026-05-13 09:51:57 +00:00
  • e772faf22f policy/v2: add ssh-edges captures from Tailscale SaaS Kristoffer Dalby 2026-05-13 09:46:30 +00:00
  • 9df5a1513e policy/v2: trim whitespace and reject negative checkPeriod Kristoffer Dalby 2026-05-13 08:17:11 +00:00
  • 3e83be2de1 policy/v2: align SSH rule validation with Tailscale SaaS Kristoffer Dalby 2026-05-13 08:17:01 +00:00
  • 9da4543c8d policy/v2: branch tailscale_ssh_data_compat_test on APIResponseCode Kristoffer Dalby 2026-05-12 22:22:51 +00:00
  • 439964ae24 cmd/headscale/cli: mention sshTests in policy check help Kristoffer Dalby 2026-05-12 21:05:25 +00:00
  • b2d891c9d1 policy/v2: address review on sshTests engine Kristoffer Dalby 2026-05-12 21:05:18 +00:00
  • ea52cbb288 CHANGELOG: document sshTests evaluation (beta) Kristoffer Dalby 2026-05-12 21:05:13 +00:00
  • eafc35106e integration: regenerate workflow for sshTests integration test Kristoffer Dalby 2026-05-13 08:16:40 +00:00
  • 5bed3b29b9 integration: reject failing sshTests at headscale policy set Kristoffer Dalby 2026-05-13 08:16:28 +00:00
  • 5b7e9bb9c8 policy/v2: add sshtester captures from Tailscale SaaS Kristoffer Dalby 2026-05-12 21:04:58 +00:00
  • 90648a525d policy/v2: add sshtester compat runner Kristoffer Dalby 2026-05-12 21:04:50 +00:00
  • 65e4dbc4c4 policy/v2: evaluate sshTests at write boundary Kristoffer Dalby 2026-05-12 21:04:42 +00:00
  • 57f838e268 policy/v2: validate sshTests at parse Kristoffer Dalby 2026-05-12 21:04:34 +00:00
  • 1477450b62 Deployed c4ab267c to development with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-05-12 12:19:58 +00:00
  • c4ab267c36 Refresh features page Florian Preinstorfer 2026-05-01 07:07:44 +02:00
  • 109bfc404c Refresh docs for Grants Florian Preinstorfer 2026-04-19 12:59:20 +02:00
  • 1a64d950fd Document supported autogroups once Florian Preinstorfer 2026-04-19 12:39:27 +02:00
  • edb7ad0f81 Rewrite ACL docs as policy Florian Preinstorfer 2026-04-18 20:11:19 +02:00
  • 892ffffc4a Remove misleading comment Florian Preinstorfer 2026-05-11 12:53:22 +02:00
  • e13f0458bb Remove redundant prefix Florian Preinstorfer 2026-04-19 13:59:14 +02:00
  • 68b0014871 Use distroless without quotes Florian Preinstorfer 2026-04-19 14:03:06 +02:00
  • 484462898b Remove link to sqlite Florian Preinstorfer 2026-04-19 13:56:17 +02:00
  • 45b698dbac Shorten container introduction Florian Preinstorfer 2026-04-19 13:55:07 +02:00
  • 14ce7e9106 Remove link to Arch AUR headscale-git Florian Preinstorfer 2026-04-19 13:46:37 +02:00
  • 84c7f0d450 Link to development builds Florian Preinstorfer 2026-04-19 13:45:01 +02:00
  • c7f221dd0a Fix typo and wording Florian Preinstorfer 2026-04-19 13:26:34 +02:00
  • 163363a12a Use docs instead of KB Florian Preinstorfer 2026-04-18 21:25:01 +02:00
  • f03d41ea9a CHANGELOG: document policy tests (beta) Kristoffer Dalby 2026-04-29 08:57:00 +00:00
  • d5b2837231 policy/v2: match default proto set for tests with no proto Kristoffer Dalby 2026-04-29 12:26:20 +00:00
  • e4e209f919 policy/v2: canonicalize Protocol form during unmarshal Kristoffer Dalby 2026-04-29 12:25:01 +00:00
  • f172dba0e3 policy/v2: validate tests block at parse boundary Kristoffer Dalby 2026-04-29 14:34:10 +00:00
  • c0774a739b policy/v2: add policytester captures recorded from Tailscale SaaS Kristoffer Dalby 2026-04-29 14:33:09 +00:00
  • 7bc701179b policy/v2: add policytester compat test runner Kristoffer Dalby 2026-04-29 14:28:50 +00:00
  • b29ae25356 policy/v2: evaluate the tests block on user-initiated writes Kristoffer Dalby 2026-04-29 14:27:12 +00:00
  • 56146de377 proto: add CheckPolicy RPC Kristoffer Dalby 2026-05-11 14:09:41 +00:00
  • 1ef18fb010 cli/policy: route check through gRPC; bypass goes direct to DB tmp-prerework Kristoffer Dalby 2026-05-11 14:09:59 +00:00
  • 596ecec1db proto: add CheckPolicy RPC Kristoffer Dalby 2026-05-11 14:09:41 +00:00
  • c3df84e354 policy/matcher: include CapGrant.Dsts in match destinations Kristoffer Dalby 2026-05-11 11:17:55 +00:00
  • 795a1efe9b ci: fetch full history in golangci-lint job Kristoffer Dalby 2026-05-09 10:52:25 +00:00
  • dc733767c4 Dockerfile.tailscale-HEAD,Dockerfile.derper: bump golang to 1.26.3 Kristoffer Dalby 2026-05-09 10:52:14 +00:00
  • 542091e82b Add unit test Lealem Amedie 2026-05-05 14:58:46 -06:00
  • 6cd919d411 mapper: include UserProfiles in policy-change MapResponses Lealem Amedie 2026-05-05 13:34:20 -06:00
  • 2f907edf87 hscontrol/types: regenerate types_clone.go for viewer bump Kristoffer Dalby 2026-04-29 17:13:06 +00:00
  • 9621a97ebe ci, pre-commit: validate vendor hash via vendorhash check Kristoffer Dalby 2026-04-29 07:59:19 +00:00
  • e470774f6a cmd/vendorhash: track vendor SRI in flakehashes.json Kristoffer Dalby 2026-04-29 07:59:05 +00:00
  • 980622e9a5 flake.nix, go.mod: bump tailscale.com to v1.97.0-pre Kristoffer Dalby 2026-04-29 08:06:18 +00:00
  • 091c65f067 Dockerfile.{tailscale-HEAD,derper}: bump build image to golang:1.26.3-alpine Kristoffer Dalby 2026-05-09 14:21:35 +00:00
  • 1661a9122a CHANGELOG: document policy tests (beta) Kristoffer Dalby 2026-04-29 08:57:00 +00:00
  • a9a84b3f0a policy/v2: match default proto set for tests with no proto Kristoffer Dalby 2026-04-29 12:26:20 +00:00
  • 9685a742a6 policy/v2: canonicalize Protocol form during unmarshal Kristoffer Dalby 2026-04-29 12:25:01 +00:00
  • 7794d30263 policy/v2: validate tests block at parse boundary Kristoffer Dalby 2026-04-29 14:34:10 +00:00
  • 220a2e31f3 policy/v2: add policytester captures recorded from Tailscale SaaS Kristoffer Dalby 2026-04-29 14:33:09 +00:00
  • 3a0cc30a3a policy/v2: add policytester compat test runner Kristoffer Dalby 2026-04-29 14:28:50 +00:00
  • 47f851c43b policy/v2: evaluate the tests block on user-initiated writes Kristoffer Dalby 2026-04-29 14:27:12 +00:00
  • 4e0c2b8556 cmd/headscale/cli: validate users in policy check Kristoffer Dalby 2026-04-28 16:09:51 +00:00
  • bc9fb6d403 hscontrol/policy/v2: reject ambiguous user references at load time Kristoffer Dalby 2026-04-28 16:09:42 +00:00
  • 0e58b2977e Deployed 585d0c01 to development with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-05-09 03:14:35 +00:00
  • 585d0c01bc docs(config): fix typo in config-example.yaml Möhsün Babayev 2026-05-06 23:45:15 +04:00
  • 01eb5402f9 docs(setup): fix typo in requirements.md Möhsün Babayev 2026-05-06 23:27:52 +04:00
  • ea3774e7e6 Deployed e597f4c8 to development with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-05-09 03:03:18 +00:00
  • e597f4c8a0 Add Headscale UI to web UI documentation MunMunMiao 2026-05-05 20:15:35 +08:00
  • 01e548e030 state: avoid nil deref in registration handlers when old user is missing SAY-5 2026-05-05 05:48:28 +00:00
  • 9482cdf590 testdata: drop unused uppercase SSH-*.hujson fixtures Kristoffer Dalby 2026-05-04 09:57:33 +00:00
  • 3d0f597b23 oidc: handle groups claim as string or array (FlexibleStringSlice) primewildy 2026-05-04 14:26:53 +01:00
  • 76ee29352b servertest: cover via-grant exit-node visibility end-to-end Kristoffer Dalby 2026-04-30 11:40:43 +00:00
  • 2b7f15abaa policy/v2: surface autogroup:internet via grants on exit nodes Kristoffer Dalby 2026-04-30 11:40:29 +00:00
  • ecaf56e0a0 integration: drop Force flag on docker network disconnect Kristoffer Dalby 2026-04-30 09:01:46 +00:00
  • 94ec607bca state: per-goroutine deadline in HA probe cycle Kristoffer Dalby 2026-04-30 08:39:31 +00:00
  • d1443a431c integration: skip subpackage tests in workflow generator Kristoffer Dalby 2026-04-30 08:22:59 +00:00
  • 155e42f892 integration: retry transient docker network ops Kristoffer Dalby 2026-04-30 08:18:50 +00:00
  • 3d5c0af4e7 state: preserve previous primary when all HA advertisers unhealthy Kristoffer Dalby 2026-04-29 13:34:51 +00:00
  • 27c9113af8 integration: regenerate workflow for HA docker disconnect test Kristoffer Dalby 2026-04-29 12:27:40 +00:00
  • 7bb86f2c16 integration: HA cable-pull lifecycle test Kristoffer Dalby 2026-04-29 12:25:40 +00:00
  • 863fa2f815 servertest, integration: cover HA both-offline recovery Kristoffer Dalby 2026-04-28 12:16:46 +00:00
  • 9f7c8e9a07 state: clear Unhealthy when node leaves HA candidate set Kristoffer Dalby 2026-04-28 16:04:12 +00:00