Commit Graph

  • 7feb5a52e4 policy/v2: build ACL compat nodes from golden file topology Kristoffer Dalby 2026-04-06 08:15:49 +00:00
  • 0cb9536784 policy/v2: remove obsolete equivalence tests Kristoffer Dalby 2026-04-04 16:06:44 +00:00
  • 960219e52c policy/v2: make ACL error validation strict Kristoffer Dalby 2026-04-04 13:21:05 +00:00
  • 8201be9b4b policy: document CanAccessRoute and filterForNodeLocked design Kristoffer Dalby 2026-04-04 13:20:45 +00:00
  • f55d6c3cb0 policy/v2: wire PolicyManager through compiledGrant Kristoffer Dalby 2026-04-04 13:18:15 +00:00
  • 1ea3b676f2 policyutil: fix reduceCapGrantRule and add reduction tests Kristoffer Dalby 2026-04-03 09:32:42 +00:00
  • ac8fc70e7d policy/v2: add false-positive peer test for all golden files Kristoffer Dalby 2026-04-03 09:29:35 +00:00
  • f678bcb6c2 policy/v2: add filter compilation equivalence tests Kristoffer Dalby 2026-04-03 09:23:21 +00:00
  • 3e2dd93c33 servertest: improve via compat test infrastructure Kristoffer Dalby 2026-04-03 09:22:22 +00:00
  • 8038c39e23 policy/matcher: add unit tests Kristoffer Dalby 2026-04-03 09:16:48 +00:00
  • b9a9b5026f policy/v2: add auto-approval and route access compat tests Kristoffer Dalby 2026-04-03 07:26:23 +00:00
  • 5816a5a8b1 policy/v2: add peer visibility compat tests for subnet ACLs Kristoffer Dalby 2026-04-02 16:18:37 +00:00
  • 61c9ae81e4 Remove old migrations for the debian package Florian Preinstorfer 2026-04-11 20:30:57 +02:00
  • 1d57358314 integration: add subnet-to-subnet ACL routing test Ubuntu 2026-04-02 13:25:34 +00:00
  • 3c125e62a3 types: consider subnet routes as source identity in ACL matching Ubuntu 2026-04-02 13:23:23 +00:00
  • 8d3ae36675 types,policy: add tests for subnet-to-subnet route visibility Ubuntu 2026-04-02 13:23:14 +00:00
  • 1f9635c2ec ci: restrict test generator to .go files Kristoffer Dalby 2026-04-10 12:42:54 +00:00
  • fd1074160e CHANGELOG: document user-facing changes from #3180 Kristoffer Dalby 2026-04-10 09:08:33 +00:00
  • d66d3a4269 oidc: add confirmation page for node registration Kristoffer Dalby 2026-04-09 18:18:44 +00:00
  • d5a4e6e36a debug: route statsviz through tsweb.Protected Kristoffer Dalby 2026-04-09 17:59:46 +00:00
  • 8c6cb05ab4 noise: pass context to sshActionFollowUp Kristoffer Dalby 2026-04-09 17:58:38 +00:00
  • 42b8c779a0 hscontrol: limit /verify request body size Kristoffer Dalby 2026-04-09 17:56:55 +00:00
  • a3c4ad2ca3 types: omit secret fields from JSON marshalling Kristoffer Dalby 2026-04-09 17:54:46 +00:00
  • 0641771128 db: guard UsePreAuthKey with WHERE used=false Kristoffer Dalby 2026-04-09 17:52:03 +00:00
  • f7d8bb8b3f app: remove gRPC reflection from remote server Kristoffer Dalby 2026-04-09 17:48:41 +00:00
  • adb9467f60 oidc: validate state parameter length in callback Kristoffer Dalby 2026-04-09 17:44:42 +00:00
  • 41d70fe87b auth: check machine key on tailscaled-restart fast path Kristoffer Dalby 2026-04-09 17:44:21 +00:00
  • 99767cf805 hscontrol: validate machine key and bind src/dst in SSH check handler Kristoffer Dalby 2026-04-09 17:41:01 +00:00
  • 0d4f2293ff state: replace zcache with bounded LRU for auth cache Kristoffer Dalby 2026-04-09 17:27:42 +00:00
  • 3587225a88 mapper: fix phantom updateSentPeers on disconnected nodes Kristoffer Dalby 2026-04-08 12:27:04 +00:00
  • 9371b4ee28 mapper: fix empty Peers list not clearing client peer state Kristoffer Dalby 2026-04-08 12:26:44 +00:00
  • cef5338cfe types/change: panic on Merge with conflicting TargetNode values Kristoffer Dalby 2026-04-08 12:26:22 +00:00
  • 3529fe0da1 types: fix OIDC identifier path traversal dropping subject Kristoffer Dalby 2026-04-08 12:26:06 +00:00
  • 4064f13bda types: fix nil panics in Owner() and TailscaleUserID() for orphaned nodes Kristoffer Dalby 2026-04-08 12:25:50 +00:00
  • 3037e5eee0 db: fix slice aliasing in migration tag merge Kristoffer Dalby 2026-04-08 12:25:21 +00:00
  • 82bb4331f5 state: fix routesChanged mutating input Hostinfo Kristoffer Dalby 2026-04-02 13:11:25 +00:00
  • 2a2d5c869a types/change: fix slice aliasing in Change.Merge Kristoffer Dalby 2026-04-02 13:10:20 +00:00
  • 157e3a30fc AGENTS.md: trim to behavioural guidance, drop deprecated sub-agent Kristoffer Dalby 2026-04-09 15:42:24 +00:00
  • 70b622fc68 docs: expand cmd/hi and integration READMEs Kristoffer Dalby 2026-04-09 15:39:15 +00:00
  • 742878d172 all: regenerate generated files for new tool versions Kristoffer Dalby 2026-04-09 16:51:25 +00:00
  • 2109674467 nix: update flake inputs and dev shell tool versions Kristoffer Dalby 2026-04-09 16:10:07 +00:00
  • 36a73f8c22 all: update Go dependencies Kristoffer Dalby 2026-04-09 16:09:43 +00:00
  • e40dbe3b28 Dockerfile: bump tailscale DERPer builder to Go 1.26.2 Kristoffer Dalby 2026-04-09 16:09:01 +00:00
  • 2764e5f228 testdata: re-run ssh tscap corpus with localpart anonymization backup/pre-rebase-20260409-092352 Kristoffer Dalby 2026-04-09 08:51:57 +00:00
  • 7c756b8201 db: scope DestroyUser to only delete the target user's pre-auth keys Jacky 2026-03-27 13:12:20 +00:00
  • d6082cb9f6 testdata: re-run tscap with populated approved_routes and tag fixes backup/pre-msg-rewrite-3169 Kristoffer Dalby 2026-04-09 06:20:03 +00:00
  • 5cba8ddc62 testdata: re-run tscap with populated approved_routes and tag fixes Kristoffer Dalby 2026-04-09 06:20:03 +00:00
  • 0c577301c6 policy/v2: ignore implementation-specific SSH check action fields Kristoffer Dalby 2026-04-09 06:19:17 +00:00
  • a19fd9bf00 policy/v2: ignore implementation-specific SSH check action fields Kristoffer Dalby 2026-04-09 06:19:17 +00:00
  • 1e20972db0 servertest: align via grant compat test with new tscap golden format Kristoffer Dalby 2026-04-09 06:18:43 +00:00
  • ce81ab2a2f servertest: align via grant compat test with new tscap golden format Kristoffer Dalby 2026-04-09 06:18:43 +00:00
  • c0fd9b60ed mapper, db: drop redundant zerolog SetGlobalLevel calls in tests Kristoffer Dalby 2026-04-08 20:50:15 +00:00
  • b83e30c090 mapper, db: drop redundant zerolog SetGlobalLevel calls in tests Kristoffer Dalby 2026-04-08 20:50:15 +00:00
  • d3a6afdbf0 hscontrol/types: silence zerolog by default in tests Kristoffer Dalby 2026-04-08 20:49:47 +00:00
  • 3fa4e2dafe hscontrol/types: silence zerolog by default in tests Kristoffer Dalby 2026-04-08 20:49:47 +00:00
  • 800fed8d50 testdata: replace with multi-user tscap output Kristoffer Dalby 2026-04-08 15:28:23 +00:00
  • 8703aa0bab testdata: replace with multi-user tscap output Kristoffer Dalby 2026-04-08 15:28:23 +00:00
  • 6ae182696f state: fix policy change race in UpdateNodeFromMapRequest Kristoffer Dalby 2026-03-11 08:09:08 +00:00
  • ccddeceeec state: fix GORM not persisting user_id=NULL on tagged node conversion Kristoffer Dalby 2026-04-08 08:42:50 +00:00
  • 580dcad683 hscontrol: add tests for SetTags user_id database persistence Kristoffer Dalby 2026-04-08 08:42:50 +00:00
  • dd57fecb1f Deployed 442fcdbd to development with MkDocs 1.6.1 and mike 2.1.4 github-actions 2026-04-08 12:00:59 +00:00
  • 442fcdbd33 capver: regenerate for tailscale v1.96 Kristoffer Dalby 2026-04-08 11:20:16 +00:00
  • 380f531342 state: trigger PolicyChange on every Connect and Disconnect Kristoffer Dalby 2026-04-08 10:31:54 +00:00
  • 51eed414b4 integration: fix ACL tests for address-family-specific resolve Kristoffer Dalby 2026-04-08 10:31:35 +00:00
  • e638cbc9b9 integration/tsic: accept via peer-relay in non-direct ping check Kristoffer Dalby 2026-04-08 10:31:08 +00:00
  • 6390fcee79 Dockerfile: bump tailscale HEAD builder to Go 1.26.2 Kristoffer Dalby 2026-04-08 10:30:52 +00:00
  • b52f8cb52f CHANGELOG: document node.expiry and oidc.expiry deprecation Kristoffer Dalby 2026-04-02 20:43:09 +00:00
  • ff29af63f6 servertest: use memnet networking and add WithNodeExpiry option Kristoffer Dalby 2026-04-02 09:19:05 +00:00
  • 7e8930c507 hscontrol: add tests for default node key expiry Kristoffer Dalby 2026-03-01 22:54:10 +00:00
  • 6337a3dbc4 state: apply default node key expiry on registration Kristoffer Dalby 2026-03-01 22:53:55 +00:00
  • 4d0b273b90 types: add node.expiry config, deprecate oidc.expiry Kristoffer Dalby 2026-03-01 22:53:26 +00:00
  • 818a8eb8e3 compat tests: build node topology per-scenario, not globally Kristoffer Dalby 2026-04-08 11:35:11 +00:00
  • 4005a097e9 compat tests: build node topology per-scenario, not globally Kristoffer Dalby 2026-04-08 11:35:11 +00:00
  • 9e96adfa49 testdata: replace legacy captures with anonymized tscap output Kristoffer Dalby 2026-04-08 11:29:41 +00:00
  • b7da0c403c testdata: replace legacy captures with anonymized tscap output Kristoffer Dalby 2026-04-08 11:29:41 +00:00
  • 9f5e49d3ee compat tests: switch to anonymized norse-god + pokemon names Kristoffer Dalby 2026-04-08 08:21:31 +00:00
  • 76c7cb3342 compat tests: switch to anonymized norse-god + pokemon names Kristoffer Dalby 2026-04-08 08:21:31 +00:00
  • d1bd6e5b88 testcapture: add capture format package and rewire compat tests Kristoffer Dalby 2026-04-08 08:05:45 +00:00
  • e30de58627 testcapture: add capture format package and rewire compat tests Kristoffer Dalby 2026-04-08 08:05:45 +00:00
  • f213a8c22a policy/v2: build ACL compat nodes from golden file topology Kristoffer Dalby 2026-04-06 08:15:49 +00:00
  • 211da43f57 policy/v2: build ACL compat nodes from golden file topology Kristoffer Dalby 2026-04-06 08:15:49 +00:00
  • 6a8a0b4b14 testdata: recapture all golden files with 19-node tailnet and netmap Kristoffer Dalby 2026-04-06 08:07:07 +00:00
  • c504f891cf testdata: recapture all golden files with 19-node tailnet and netmap Kristoffer Dalby 2026-04-06 08:07:07 +00:00
  • 78926fbde4 fix: scope DestroyUser to only delete target user's pre-auth keys v0.28-fix Jacky 2026-04-05 14:24:01 +09:00
  • 2469c3eb80 policy/v2: remove obsolete global vs per-node equivalence tests Kristoffer Dalby 2026-04-04 16:06:44 +00:00
  • ff16af0d6e policy/v2: remove obsolete global vs per-node equivalence tests Kristoffer Dalby 2026-04-04 16:06:44 +00:00
  • 3065b45310 policy/v2: make ACL error validation strict Kristoffer Dalby 2026-04-04 13:21:05 +00:00
  • b2f7d66686 policy/v2: make ACL error validation strict Kristoffer Dalby 2026-04-04 13:21:05 +00:00
  • d77ce3582d policy: document CanAccessRoute and filterForNodeLocked design Kristoffer Dalby 2026-04-04 13:20:45 +00:00
  • 4dedb70818 policy: document CanAccessRoute and filterForNodeLocked design Kristoffer Dalby 2026-04-04 13:20:45 +00:00
  • bbea92033c policy/v2: wire PolicyManager through compiledGrant, delete old paths Kristoffer Dalby 2026-04-04 13:18:15 +00:00
  • 6e3a03ab54 policy/v2: wire PolicyManager through compiledGrant, delete old paths Kristoffer Dalby 2026-04-04 13:18:15 +00:00
  • ac8f9c7ecc policyutil: fix reduceCapGrantRule and add reduction tests Kristoffer Dalby 2026-04-03 09:32:42 +00:00
  • f2664e434e policyutil: fix reduceCapGrantRule and add reduction tests Kristoffer Dalby 2026-04-03 09:32:42 +00:00
  • 6e5508444f policy/v2: add false-positive peer test for all 98 golden files Kristoffer Dalby 2026-04-03 09:29:35 +00:00
  • d092e4b325 policy/v2: add false-positive peer test for all 98 golden files Kristoffer Dalby 2026-04-03 09:29:35 +00:00
  • 8754ed10dc policy/v2: add global vs per-node filter compilation equivalence tests Kristoffer Dalby 2026-04-03 09:23:21 +00:00
  • c22bddfe83 policy/v2: add global vs per-node filter compilation equivalence tests Kristoffer Dalby 2026-04-03 09:23:21 +00:00
  • db8ac49680 servertest: improve via compat test infrastructure Kristoffer Dalby 2026-04-03 09:22:22 +00:00
  • 782c367ee4 servertest: improve via compat test infrastructure Kristoffer Dalby 2026-04-03 09:22:22 +00:00