Commit Graph

  • 580dcad683 hscontrol: add tests for SetTags user_id database persistence Kristoffer Dalby 2026-04-08 08:42:50 +00:00
  • dd57fecb1f Deployed 442fcdbd to development with MkDocs 1.6.1 and mike 2.1.4 github-actions 2026-04-08 12:00:59 +00:00
  • 442fcdbd33 capver: regenerate for tailscale v1.96 Kristoffer Dalby 2026-04-08 11:20:16 +00:00
  • 380f531342 state: trigger PolicyChange on every Connect and Disconnect Kristoffer Dalby 2026-04-08 10:31:54 +00:00
  • 51eed414b4 integration: fix ACL tests for address-family-specific resolve Kristoffer Dalby 2026-04-08 10:31:35 +00:00
  • e638cbc9b9 integration/tsic: accept via peer-relay in non-direct ping check Kristoffer Dalby 2026-04-08 10:31:08 +00:00
  • 6390fcee79 Dockerfile: bump tailscale HEAD builder to Go 1.26.2 Kristoffer Dalby 2026-04-08 10:30:52 +00:00
  • b52f8cb52f CHANGELOG: document node.expiry and oidc.expiry deprecation Kristoffer Dalby 2026-04-02 20:43:09 +00:00
  • ff29af63f6 servertest: use memnet networking and add WithNodeExpiry option Kristoffer Dalby 2026-04-02 09:19:05 +00:00
  • 7e8930c507 hscontrol: add tests for default node key expiry Kristoffer Dalby 2026-03-01 22:54:10 +00:00
  • 6337a3dbc4 state: apply default node key expiry on registration Kristoffer Dalby 2026-03-01 22:53:55 +00:00
  • 4d0b273b90 types: add node.expiry config, deprecate oidc.expiry Kristoffer Dalby 2026-03-01 22:53:26 +00:00
  • 818a8eb8e3 compat tests: build node topology per-scenario, not globally Kristoffer Dalby 2026-04-08 11:35:11 +00:00
  • 4005a097e9 compat tests: build node topology per-scenario, not globally Kristoffer Dalby 2026-04-08 11:35:11 +00:00
  • 9e96adfa49 testdata: replace legacy captures with anonymized tscap output Kristoffer Dalby 2026-04-08 11:29:41 +00:00
  • b7da0c403c testdata: replace legacy captures with anonymized tscap output Kristoffer Dalby 2026-04-08 11:29:41 +00:00
  • 9f5e49d3ee compat tests: switch to anonymized norse-god + pokemon names Kristoffer Dalby 2026-04-08 08:21:31 +00:00
  • 76c7cb3342 compat tests: switch to anonymized norse-god + pokemon names Kristoffer Dalby 2026-04-08 08:21:31 +00:00
  • d1bd6e5b88 testcapture: add capture format package and rewire compat tests Kristoffer Dalby 2026-04-08 08:05:45 +00:00
  • e30de58627 testcapture: add capture format package and rewire compat tests Kristoffer Dalby 2026-04-08 08:05:45 +00:00
  • f213a8c22a policy/v2: build ACL compat nodes from golden file topology Kristoffer Dalby 2026-04-06 08:15:49 +00:00
  • 211da43f57 policy/v2: build ACL compat nodes from golden file topology Kristoffer Dalby 2026-04-06 08:15:49 +00:00
  • 6a8a0b4b14 testdata: recapture all golden files with 19-node tailnet and netmap Kristoffer Dalby 2026-04-06 08:07:07 +00:00
  • c504f891cf testdata: recapture all golden files with 19-node tailnet and netmap Kristoffer Dalby 2026-04-06 08:07:07 +00:00
  • 78926fbde4 fix: scope DestroyUser to only delete target user's pre-auth keys v0.28-fix Jacky 2026-04-05 14:24:01 +09:00
  • 2469c3eb80 policy/v2: remove obsolete global vs per-node equivalence tests Kristoffer Dalby 2026-04-04 16:06:44 +00:00
  • ff16af0d6e policy/v2: remove obsolete global vs per-node equivalence tests Kristoffer Dalby 2026-04-04 16:06:44 +00:00
  • 3065b45310 policy/v2: make ACL error validation strict Kristoffer Dalby 2026-04-04 13:21:05 +00:00
  • b2f7d66686 policy/v2: make ACL error validation strict Kristoffer Dalby 2026-04-04 13:21:05 +00:00
  • d77ce3582d policy: document CanAccessRoute and filterForNodeLocked design Kristoffer Dalby 2026-04-04 13:20:45 +00:00
  • 4dedb70818 policy: document CanAccessRoute and filterForNodeLocked design Kristoffer Dalby 2026-04-04 13:20:45 +00:00
  • bbea92033c policy/v2: wire PolicyManager through compiledGrant, delete old paths Kristoffer Dalby 2026-04-04 13:18:15 +00:00
  • 6e3a03ab54 policy/v2: wire PolicyManager through compiledGrant, delete old paths Kristoffer Dalby 2026-04-04 13:18:15 +00:00
  • ac8f9c7ecc policyutil: fix reduceCapGrantRule and add reduction tests Kristoffer Dalby 2026-04-03 09:32:42 +00:00
  • f2664e434e policyutil: fix reduceCapGrantRule and add reduction tests Kristoffer Dalby 2026-04-03 09:32:42 +00:00
  • 6e5508444f policy/v2: add false-positive peer test for all 98 golden files Kristoffer Dalby 2026-04-03 09:29:35 +00:00
  • d092e4b325 policy/v2: add false-positive peer test for all 98 golden files Kristoffer Dalby 2026-04-03 09:29:35 +00:00
  • 8754ed10dc policy/v2: add global vs per-node filter compilation equivalence tests Kristoffer Dalby 2026-04-03 09:23:21 +00:00
  • c22bddfe83 policy/v2: add global vs per-node filter compilation equivalence tests Kristoffer Dalby 2026-04-03 09:23:21 +00:00
  • db8ac49680 servertest: improve via compat test infrastructure Kristoffer Dalby 2026-04-03 09:22:22 +00:00
  • 782c367ee4 servertest: improve via compat test infrastructure Kristoffer Dalby 2026-04-03 09:22:22 +00:00
  • 8a3a4af03d policy/matcher: add unit tests for matcher package Kristoffer Dalby 2026-04-03 09:16:48 +00:00
  • 471b9bbdbb policy/matcher: add unit tests for matcher package Kristoffer Dalby 2026-04-03 09:16:48 +00:00
  • bbcbcd3ea5 policy/v2: add auto-approval and route access compat tests Kristoffer Dalby 2026-04-03 07:26:23 +00:00
  • f5a0493886 policy/v2: add auto-approval and route access compat tests Kristoffer Dalby 2026-04-03 07:26:23 +00:00
  • 85a03db016 policy/v2: add peer visibility compat tests for subnet-to-subnet ACLs Kristoffer Dalby 2026-04-02 16:18:37 +00:00
  • 8addacb06a policy/v2: add peer visibility compat tests for subnet-to-subnet ACLs Kristoffer Dalby 2026-04-02 16:18:37 +00:00
  • cfcc6e4615 Deployed 23a5f1b6 to development with MkDocs 1.6.1 and mike 2.1.4 github-actions 2026-04-02 19:25:06 +00:00
  • 23a5f1b628 Use pymdownx.magiclink with its default configuration Florian Preinstorfer 2026-03-29 16:51:06 +02:00
  • 44600550c6 Fix invisible selected menu item Florian Preinstorfer 2026-03-29 16:41:46 +02:00
  • 34fd7d00ea testdata: add subnet-to-subnet route compatibility golden files Kristoffer Dalby 2026-04-02 16:01:40 +00:00
  • 798c8a9edb testdata: add subnet-to-subnet route compatibility golden files Kristoffer Dalby 2026-04-02 16:01:40 +00:00
  • 232a9c8f9a integration: add subnet-to-subnet ACL routing test Ubuntu 2026-04-02 13:25:34 +00:00
  • f37401e9bc integration: add subnet-to-subnet ACL routing test Ubuntu 2026-04-02 13:25:34 +00:00
  • ea85dcbc14 types: consider subnet routes as source identity in ACL matching Ubuntu 2026-04-02 13:23:23 +00:00
  • 1883f5022e types: consider subnet routes as source identity in ACL matching Ubuntu 2026-04-02 13:23:23 +00:00
  • 45d5544736 types,policy: add tests for subnet-to-subnet route visibility Ubuntu 2026-04-02 13:23:14 +00:00
  • 9210e597b1 types,policy: add tests for subnet-to-subnet route visibility Ubuntu 2026-04-02 13:23:14 +00:00
  • 835db974b5 testdata: strip unused fields from all test data files (23MB -> 4MB) Kristoffer Dalby 2026-03-30 17:10:53 +00:00
  • 30dce30a9d testdata: convert .json to .hujson with header comments Kristoffer Dalby 2026-03-30 17:08:26 +00:00
  • f693cc0851 CHANGELOG: document grants support for 0.29.0 Kristoffer Dalby 2026-03-24 06:44:52 +00:00
  • abd2b15db5 policy/v2: clean up dead error variables, stale TODO, and test skip reasons Kristoffer Dalby 2026-03-30 13:15:09 +00:00
  • b762e4c350 integration: remove exit node via grant tests Kristoffer Dalby 2026-03-29 06:08:06 +00:00
  • c36cedc32f policy/v2: fix via grants in BuildPeerMap, MatchersForNode, and ViaRoutesForPeer Kristoffer Dalby 2026-03-28 12:48:19 +00:00
  • 6a55f7d731 policy/v2: add via exit steering golden captures and tests Kristoffer Dalby 2026-03-28 11:05:16 +00:00
  • bca6e6334d integration: add custom subnet support and fix exit node tests Kristoffer Dalby 2026-03-26 21:33:48 +00:00
  • 0431039f2a servertest: add regression tests for via grant filter rules Kristoffer Dalby 2026-03-26 06:03:55 +00:00
  • ccd284c0a5 policy/v2: use per-node filter compilation for via grants Kristoffer Dalby 2026-03-26 06:03:28 +00:00
  • 9db5fb6393 integration: fix error message assertion for invalid ACL action Kristoffer Dalby 2026-03-25 15:10:47 +00:00
  • 3ca4ff8f3f state,servertest: add grant control plane tests and fix via route ReduceRoutes filtering Kristoffer Dalby 2026-03-23 16:25:27 +00:00
  • 5cd5e5de69 policy/v2: add unit tests for ViaRoutesForPeer Kristoffer Dalby 2026-03-23 16:25:15 +00:00
  • 08d26e541c policy/v2: add unit tests for grant filter compilation helpers Kristoffer Dalby 2026-03-23 16:25:03 +00:00
  • d243adaedd types,mapper,integration: enable Taildrive and add cap/drive grant lifecycle test Kristoffer Dalby 2026-03-23 09:43:30 +00:00
  • 9b1a6b6c05 integration: add cap/relay grant peer relay lifecycle test Kristoffer Dalby 2026-03-23 08:22:41 +00:00
  • 8573ff9158 policy/v2: fix grant-only policies returning FilterAllowAll Kristoffer Dalby 2026-03-23 08:22:26 +00:00
  • a739862c65 integration: add via grant route steering tests Kristoffer Dalby 2026-03-22 20:43:57 +00:00
  • 8358017dcf policy/v2,state,mapper: implement per-viewer via route steering Kristoffer Dalby 2026-03-22 20:43:28 +00:00
  • 28be15f8ea policy/v2: handle autogroup:internet in via grant compilation Kristoffer Dalby 2026-03-22 20:42:30 +00:00
  • 687cf0882f policy/v2: implement autogroup:danger-all support Kristoffer Dalby 2026-03-18 23:09:42 +00:00
  • 4f040dead2 policy/v2: implement grant validation rules matching Tailscale SaaS Kristoffer Dalby 2026-03-18 21:15:58 +00:00
  • 54db47badc policy/v2: implement via route compilation for grants Kristoffer Dalby 2026-03-18 20:30:29 +00:00
  • 0e3acdd8ec policy/v2: implement CapGrant compilation with companion capabilities Kristoffer Dalby 2026-03-18 19:55:15 +00:00
  • ebe0f4078d policy/v2: preserve non-wildcard source IPs alongside wildcard ranges Kristoffer Dalby 2026-03-18 16:14:37 +00:00
  • dda35847b0 policy/v2: reorder ACL self grants to match Tailscale rule ordering Kristoffer Dalby 2026-03-18 15:12:18 +00:00
  • f95b254ea9 policy/v2: exclude exit routes from ReduceFilterRules Kristoffer Dalby 2026-03-18 14:40:12 +00:00
  • e05f45cfb1 policy/v2: use approved node routes in wildcard SrcIPs Kristoffer Dalby 2026-03-18 13:40:36 +00:00
  • 995ed0187c policy/v2: add advertised routes to compat test topologies Kristoffer Dalby 2026-03-18 13:40:19 +00:00
  • 927ce418d2 policy/v2: use bare IPs in autogroup:self DstPorts Kristoffer Dalby 2026-03-18 10:39:55 +00:00
  • 93d79d8da9 policy: include IPv6 in identity-based alias resolution Kristoffer Dalby 2026-03-18 10:24:30 +00:00
  • 500442c8f1 policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Kristoffer Dalby 2026-03-17 12:05:49 +00:00
  • 2fb71690e8 policy/v2: convert ACL compat tests to data-driven format with Tailscale SaaS captures Kristoffer Dalby 2026-03-17 11:13:04 +00:00
  • 9f7aa55689 policy/v2: refactor alias resolution to use ResolvedAddresses Kristoffer Dalby 2026-03-04 16:16:40 +01:00
  • 0fa9dcaff8 policy/v2: add data-driven grants compatibility test with Tailscale SaaS captures Kristoffer Dalby 2026-02-23 15:39:54 +00:00
  • f74ea5b8ed hscontrol/policy/v2: add Grant policy format support Kristoffer Dalby 2026-02-23 04:18:31 +01:00
  • 53b8a81d48 servertest: support tagged pre-auth keys in test clients Kristoffer Dalby 2026-03-25 15:10:09 +00:00
  • 15c1cfd778 types: include ExitRoutes in HasNetworkChanges Kristoffer Dalby 2026-03-26 18:21:16 +00:00
  • a76b4bd46c ci: switch integration tests to ARM runners Kristoffer Dalby 2026-03-31 17:50:14 +00:00
  • a9a2001ae7 integration: scale remaining hardcoded timeouts and replace pingAllHelper Kristoffer Dalby 2026-03-31 07:17:36 +00:00
  • acb8cfc7ee integration: make docker execute and ping timeouts CI-aware Kristoffer Dalby 2026-03-31 07:15:47 +00:00
  • f1e5f1346d integration/acl: add tag verification step to TestACLTagPropagationPortSpecific Kristoffer Dalby 2026-03-30 15:56:31 +00:00