Commit Graph

  • 56146de377 proto: add CheckPolicy RPC Kristoffer Dalby 2026-05-11 14:09:41 +00:00
  • 1ef18fb010 cli/policy: route check through gRPC; bypass goes direct to DB tmp-prerework Kristoffer Dalby 2026-05-11 14:09:59 +00:00
  • 596ecec1db proto: add CheckPolicy RPC Kristoffer Dalby 2026-05-11 14:09:41 +00:00
  • c3df84e354 policy/matcher: include CapGrant.Dsts in match destinations Kristoffer Dalby 2026-05-11 11:17:55 +00:00
  • 795a1efe9b ci: fetch full history in golangci-lint job Kristoffer Dalby 2026-05-09 10:52:25 +00:00
  • dc733767c4 Dockerfile.tailscale-HEAD,Dockerfile.derper: bump golang to 1.26.3 Kristoffer Dalby 2026-05-09 10:52:14 +00:00
  • 542091e82b Add unit test Lealem Amedie 2026-05-05 14:58:46 -06:00
  • 6cd919d411 mapper: include UserProfiles in policy-change MapResponses Lealem Amedie 2026-05-05 13:34:20 -06:00
  • 2f907edf87 hscontrol/types: regenerate types_clone.go for viewer bump Kristoffer Dalby 2026-04-29 17:13:06 +00:00
  • 9621a97ebe ci, pre-commit: validate vendor hash via vendorhash check Kristoffer Dalby 2026-04-29 07:59:19 +00:00
  • e470774f6a cmd/vendorhash: track vendor SRI in flakehashes.json Kristoffer Dalby 2026-04-29 07:59:05 +00:00
  • 980622e9a5 flake.nix, go.mod: bump tailscale.com to v1.97.0-pre Kristoffer Dalby 2026-04-29 08:06:18 +00:00
  • 091c65f067 Dockerfile.{tailscale-HEAD,derper}: bump build image to golang:1.26.3-alpine Kristoffer Dalby 2026-05-09 14:21:35 +00:00
  • 1661a9122a CHANGELOG: document policy tests (beta) Kristoffer Dalby 2026-04-29 08:57:00 +00:00
  • a9a84b3f0a policy/v2: match default proto set for tests with no proto Kristoffer Dalby 2026-04-29 12:26:20 +00:00
  • 9685a742a6 policy/v2: canonicalize Protocol form during unmarshal Kristoffer Dalby 2026-04-29 12:25:01 +00:00
  • 7794d30263 policy/v2: validate tests block at parse boundary Kristoffer Dalby 2026-04-29 14:34:10 +00:00
  • 220a2e31f3 policy/v2: add policytester captures recorded from Tailscale SaaS Kristoffer Dalby 2026-04-29 14:33:09 +00:00
  • 3a0cc30a3a policy/v2: add policytester compat test runner Kristoffer Dalby 2026-04-29 14:28:50 +00:00
  • 47f851c43b policy/v2: evaluate the tests block on user-initiated writes Kristoffer Dalby 2026-04-29 14:27:12 +00:00
  • 4e0c2b8556 cmd/headscale/cli: validate users in policy check Kristoffer Dalby 2026-04-28 16:09:51 +00:00
  • bc9fb6d403 hscontrol/policy/v2: reject ambiguous user references at load time Kristoffer Dalby 2026-04-28 16:09:42 +00:00
  • 0e58b2977e Deployed 585d0c01 to development with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-05-09 03:14:35 +00:00
  • 585d0c01bc docs(config): fix typo in config-example.yaml Möhsün Babayev 2026-05-06 23:45:15 +04:00
  • 01eb5402f9 docs(setup): fix typo in requirements.md Möhsün Babayev 2026-05-06 23:27:52 +04:00
  • ea3774e7e6 Deployed e597f4c8 to development with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-05-09 03:03:18 +00:00
  • e597f4c8a0 Add Headscale UI to web UI documentation MunMunMiao 2026-05-05 20:15:35 +08:00
  • 01e548e030 state: avoid nil deref in registration handlers when old user is missing SAY-5 2026-05-05 05:48:28 +00:00
  • 9482cdf590 testdata: drop unused uppercase SSH-*.hujson fixtures Kristoffer Dalby 2026-05-04 09:57:33 +00:00
  • 3d0f597b23 oidc: handle groups claim as string or array (FlexibleStringSlice) primewildy 2026-05-04 14:26:53 +01:00
  • 76ee29352b servertest: cover via-grant exit-node visibility end-to-end Kristoffer Dalby 2026-04-30 11:40:43 +00:00
  • 2b7f15abaa policy/v2: surface autogroup:internet via grants on exit nodes Kristoffer Dalby 2026-04-30 11:40:29 +00:00
  • ecaf56e0a0 integration: drop Force flag on docker network disconnect Kristoffer Dalby 2026-04-30 09:01:46 +00:00
  • 94ec607bca state: per-goroutine deadline in HA probe cycle Kristoffer Dalby 2026-04-30 08:39:31 +00:00
  • d1443a431c integration: skip subpackage tests in workflow generator Kristoffer Dalby 2026-04-30 08:22:59 +00:00
  • 155e42f892 integration: retry transient docker network ops Kristoffer Dalby 2026-04-30 08:18:50 +00:00
  • 3d5c0af4e7 state: preserve previous primary when all HA advertisers unhealthy Kristoffer Dalby 2026-04-29 13:34:51 +00:00
  • 27c9113af8 integration: regenerate workflow for HA docker disconnect test Kristoffer Dalby 2026-04-29 12:27:40 +00:00
  • 7bb86f2c16 integration: HA cable-pull lifecycle test Kristoffer Dalby 2026-04-29 12:25:40 +00:00
  • 863fa2f815 servertest, integration: cover HA both-offline recovery Kristoffer Dalby 2026-04-28 12:16:46 +00:00
  • 9f7c8e9a07 state: clear Unhealthy when node leaves HA candidate set Kristoffer Dalby 2026-04-28 16:04:12 +00:00
  • 66ac785c22 state: delete routes package, port primary route tests Kristoffer Dalby 2026-04-28 12:16:34 +00:00
  • 437754aeea state: switch consumers to NodeStore primary routes Kristoffer Dalby 2026-04-28 12:17:04 +00:00
  • da927eb018 state: compute primary routes inside NodeStore snapshot Kristoffer Dalby 2026-04-28 12:44:58 +00:00
  • 942313a10a types: move DebugRoutes from routes to types Kristoffer Dalby 2026-04-28 13:32:48 +00:00
  • 1fe682b141 types: add Unhealthy and SessionEpoch fields to Node Kristoffer Dalby 2026-04-28 12:40:57 +00:00
  • 010a5564c5 all: rephrase prose to fit codebase voice Kristoffer Dalby 2026-04-29 14:41:37 +00:00
  • 9bc43bf324 integration: relax HA docker disconnect non-bug stability checks backup/3203-pre-rebase Kristoffer Dalby 2026-04-29 13:35:03 +00:00
  • c1ecc562d2 state: preserve previous primary when all HA advertisers unhealthy Kristoffer Dalby 2026-04-29 13:34:51 +00:00
  • 06ac9bdf77 integration: expand HA docker disconnect to lifecycle test Kristoffer Dalby 2026-04-29 12:54:02 +00:00
  • 4ab4fbd4b9 integration: regenerate workflow for HA docker disconnect test Kristoffer Dalby 2026-04-29 12:27:40 +00:00
  • 5228818a12 integration: reproduce HA primary flap to offline node via docker disconnect Kristoffer Dalby 2026-04-29 12:25:40 +00:00
  • de60982d83 state: note tagged-path coverage and self-healing behaviour for #3199 Akhilesh Arora 2026-04-20 15:54:43 +02:00
  • bcfaf6ad68 CHANGELOG: note nil expiry preservation fix Akhilesh Arora 2026-04-16 19:46:59 +02:00
  • 0e10ca4e9a state: preserve nil expiry on user owned registration when no default is configured Akhilesh Arora 2026-04-16 19:46:22 +02:00
  • ba251e7b47 integration: cover exit nodes via autogroup:internet ACL (#3212) Kristoffer Dalby 2026-04-28 11:31:05 +00:00
  • c7a0ca709f policy: surface exit nodes via autogroup:internet (#3212) Kristoffer Dalby 2026-04-28 11:30:58 +00:00
  • a7d405a255 ci: regenerate test-integration.yaml for TestTailscaleRustAxum Kristoffer Dalby 2026-04-28 08:52:49 +00:00
  • 775bc3a715 integration: add TestTailscaleRustAxum for tailscale-rs Kristoffer Dalby 2026-04-28 08:52:46 +00:00
  • ea968e2f5d integration/tsric: add TailscaleRustInContainer package Kristoffer Dalby 2026-04-28 08:52:34 +00:00
  • 2d04fff605 state: clear Unhealthy when node leaves HA candidate set Kristoffer Dalby 2026-04-28 16:04:12 +00:00
  • 436aa298b7 state: port primary route tests, delete routes package Kristoffer Dalby 2026-04-28 13:34:33 +00:00
  • 5dd622a31b state: fold primary route election into NodeStore snapshot Kristoffer Dalby 2026-04-28 13:33:31 +00:00
  • c68e763e62 types: move DebugRoutes from routes to types Kristoffer Dalby 2026-04-28 13:32:48 +00:00
  • 3feb307a12 state: compute primary routes inside NodeStore snapshot Kristoffer Dalby 2026-04-28 12:44:58 +00:00
  • 6baee3e6c3 types: add Unhealthy and SessionEpoch fields to Node Kristoffer Dalby 2026-04-28 12:40:57 +00:00
  • 4320aa1348 state: serialise Connect/Disconnect with per-node lock Kristoffer Dalby 2026-04-28 12:17:04 +00:00
  • 7b080e8cfa servertest, integration: regression tests for HA both-offline recovery Kristoffer Dalby 2026-04-28 12:16:46 +00:00
  • 3eefe3c2cc routes: add property test for PrimaryRoutes algorithm Kristoffer Dalby 2026-04-28 12:16:34 +00:00
  • 2e1a716a9a policy/v2: fix empty grants/acls returning FilterAllowAll Kristoffer Dalby 2026-04-28 09:21:18 +00:00
  • 174e409da6 github: drop nu flatten in needs-more-info timer Kristoffer Dalby 2026-04-28 07:21:17 +00:00
  • 3672a2df3a Fix typo in API key creation help text QEDeD 2026-04-21 18:55:20 +02:00
  • ce5d1ba8f8 github: split nu where in needs-more-info timer Kristoffer Dalby 2026-04-17 08:33:49 +00:00
  • 4e1d83ecef CHANGELOG: document hostname cleanroom rewrite Kristoffer Dalby 2026-04-17 12:06:52 +00:00
  • d6dfdc100c hscontrol: route hostname handling through dnsname and NodeStore Kristoffer Dalby 2026-04-17 12:06:10 +00:00
  • a2c3ac095e state: auto-bump GivenName on collision and add SetGivenName Kristoffer Dalby 2026-04-17 12:04:07 +00:00
  • e050142179 Deployed f1494a32 to development with ProperDocs 1.6.7 and mike 2.2.0 github-actions 2026-04-18 07:34:13 +00:00
  • f1494a32ce Update links to Tailscale documentation Florian Preinstorfer 2026-04-17 21:34:56 +02:00
  • 7e6c7924ad Document availability of autgroup:internet Florian Preinstorfer 2026-04-17 21:22:59 +02:00
  • 9ea09ea4b6 Remove changelog section for 0.28.1 Florian Preinstorfer 2026-04-17 21:18:16 +02:00
  • 436d3db28e servertest: add dynamic HA failover tests Kristoffer Dalby 2026-04-17 07:29:18 +00:00
  • 978f1e3947 state: tie-break ResolveNode by GivenName then lowest NodeID Kristoffer Dalby 2026-04-17 06:51:43 +00:00
  • 2530d86f1b change: document PingRequest merge first-wins foot-gun Kristoffer Dalby 2026-04-17 06:51:30 +00:00
  • 1a58b77271 cmd/dev: validate --port fits the derived-port range Kristoffer Dalby 2026-04-17 06:51:23 +00:00
  • 427b2f15ee matcher: clarify DestsIsTheInternet single-family semantics Kristoffer Dalby 2026-04-17 06:51:08 +00:00
  • 93e8c7285f debug: explain URLIsNoise choice in ping callback Kristoffer Dalby 2026-04-17 05:52:00 +00:00
  • 842f36225e state: drain pending pings on Close Kristoffer Dalby 2026-04-17 05:51:34 +00:00
  • 0567cb6da3 app: add security headers middleware Kristoffer Dalby 2026-04-17 05:50:09 +00:00
  • 5a7cafdf85 noise: reject non-HEAD on PingResponseHandler Kristoffer Dalby 2026-04-17 05:48:43 +00:00
  • f3eb9a7bba templates: escape query value in ping page Kristoffer Dalby 2026-04-17 05:46:44 +00:00
  • 3a4af8cf87 integration: remove --accept-routes from via steering routers Kristoffer Dalby 2026-04-15 13:02:04 +00:00
  • ec48f34e1c CHANGELOG: document subnet-to-subnet ACL fixes Kristoffer Dalby 2026-04-15 08:32:25 +00:00
  • 164d659dd2 servertest: add TestViaGrantHACompat for via+HA compat tests Kristoffer Dalby 2026-04-15 08:32:21 +00:00
  • 7d104b8c8d servertest: add via grant map compat tests Kristoffer Dalby 2026-04-15 08:32:17 +00:00
  • a7c9721faa policy/v2: overhaul compat test infrastructure Kristoffer Dalby 2026-04-15 08:32:10 +00:00
  • f34dec2754 testcapture: add typed capture format package Kristoffer Dalby 2026-04-15 08:28:25 +00:00
  • 1059c678c4 hscontrol/types: silence zerolog by default in tests Kristoffer Dalby 2026-04-15 08:28:11 +00:00
  • affaa1a31d policy/v2: align SSH check action with SaaS wire format Kristoffer Dalby 2026-04-15 08:27:57 +00:00
  • ded51a4d30 policyutil: fix reduceCapGrantRule and add route reduction Kristoffer Dalby 2026-04-15 08:27:42 +00:00
  • b051e7b2bc policy/v2: wire PolicyManager through compiledGrant Kristoffer Dalby 2026-04-15 08:27:28 +00:00