summaryrefslogtreecommitdiffhomepage
AgeCommit message (Expand)AuthorFilesLines
2024-10-09util/vizerror: add ErrorWithInternal type and func WithInternalbradfitz/vizinternalBrad Fitzpatrick1-0/+18
2024-10-09cmd/k8s-operator: don't error out if ProxyClass for ProxyGroup not found. (#1...Irbe Krumina1-1/+8
2024-10-09cmd/k8s-operator: fix Pod IP selection (#13743)Irbe Krumina2-2/+6
2024-10-08util/syspolicy, ipn: add "tailscale debug component-logs" supportNick Khyl9-16/+100
2024-10-08util/syspolicy/setting: update Snapshot to use Go 1.23 iteratorsNick Khyl1-14/+11
2024-10-08cmd/k8s-operator: base ProxyGroup StatefulSet on common proxy.yaml definition...Tom Proctor3-148/+144
2024-10-08kube/egressservices: improve egress ports config readability (#13722)Tom Proctor2-37/+38
2024-10-08net/sockstats: quiet some log spam in release buildsBrad Fitzpatrick1-1/+6
2024-10-08cmd/{k8s-operator,containerboot},kube/egressservices: fix Pod IP check for du...Irbe Krumina7-45/+109
2024-10-08net/netcheck: don't panic if a region has no NodesAndrew Dunham1-0/+4
2024-10-08cmd/k8s-operator,k8s-operator: use default ProxyClass if set for ProxyGroup (...Tom Proctor17-69/+118
2024-10-08cmd/containerboot: simplify k8s setup logic (#13627)Tom Proctor1-29/+36
2024-10-07.github: Bump github/codeql-action from 3.26.9 to 3.26.11 (#13710)dependabot[bot]1-3/+3
2024-10-07.github: Bump actions/cache from 4.0.2 to 4.1.0 (#13711)dependabot[bot]1-5/+5
2024-10-07types/lazy: add DeferredInit typeNick Hill2-0/+375
2024-10-07derp: fix omitted word in commentBrad Fitzpatrick1-1/+1
2024-10-07cmd/k8s-operator,k8s-operator: create ConfigMap for egress services + small f...Irbe Krumina13-71/+153
2024-10-07derp: add server metric for batch write sizesBrad Fitzpatrick1-2/+9
2024-10-07types/key: use tlpub: in error message (#13707)Erisa A2-4/+4
2024-10-07tool/gocross: fix argument order to findBrad Fitzpatrick1-1/+1
2024-10-07cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller...Tom Proctor20-32/+1117
2024-10-06tailscaleroot: panic if tailscale_go build tag but Go toolchain mismatchBrad Fitzpatrick3-10/+45
2024-10-05wgengine: stop conntrack log spam about Canonical net probesBrad Fitzpatrick1-11/+58
2024-10-04envknob: support disk-based envknobs on the macsys buildAndrew Dunham1-23/+53
2024-10-04safeweb: allow passing http.Server in safeweb.Config (#13688)Patrick O'Doherty2-1/+35
2024-10-04hostinfo: update SetPackage doc with new Android values (#13537)kari-ts1-2/+7
2024-10-04cmd/tailscale/cli: don't print disablement secrets if init fails (#13673)Erisa A1-3/+6
2024-10-04cmd/{k8s-operator,containerboot},k8s-operator,kube: reconcile ExternalName Se...Irbe Krumina20-37/+1651
2024-10-03cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, cle...Irbe Krumina9-73/+272
2024-10-03safeweb: add StrictTransportSecurityOptions config (#13679)Patrick O'Doherty2-0/+61
2024-10-03ssh/tailssh: pass window size pixels in IoctlSetWinsize eventsBrad Fitzpatrick1-2/+4
2024-10-03logpolicy: force TLS 1.3 handshakeAndrea Gottardo1-0/+2
2024-10-03wgengine/netstack: check userspace ping success on WindowsBrad Fitzpatrick3-1/+118
2024-10-03control/controlclient: include HTTP status string in error message tooBrad Fitzpatrick1-1/+1
2024-10-02wgengine/magicsock: avoid log spam from ReceiveFunc on shutdownBrad Fitzpatrick1-1/+1
2024-10-02tailcfg: add func to check for known valid ServiceProtos (#13668)Naman Sood1-0/+10
2024-10-02ipn/ipnlocal: don't run portlist code unless service collection is onBrad Fitzpatrick1-29/+8
2024-10-02wf/firewall: allow link-local multicast for permitted local routes when the k...Nick Khyl2-2/+60
2024-10-02tstest: add the start of a testing wishlistBrad Fitzpatrick1-0/+17
2024-10-02net/dns: tweak DoH timeout, limit MaxConnsPerHost, require TLS 1.3 (#13564)Andrea Gottardo1-5/+23
2024-10-02control/control{client,http}: don't noise dial localhost:443 in http-only testsBrad Fitzpatrick4-13/+41
2024-10-02control/controlhttp: rename a param from addr to optAddr for clarityBrad Fitzpatrick1-14/+20
2024-10-02net/dnscache: don't fall back to an IPv6 dial if we don't have IPv6Brad Fitzpatrick1-2/+2
2024-10-02control/controlclient: bound ReportHealthChange context lifetime to Direct cl...Brad Fitzpatrick1-1/+7
2024-10-02net/captivedetection: set Timeout on net.Dialer (#13613)Andrea Gottardo1-1/+5
2024-10-02docs/windows/policy: add ADMX policy setting to configure the AuthKeyNick Khyl2-0/+31
2024-10-01.github: Bump github/codeql-action from 3.26.8 to 3.26.9 (#13625)dependabot[bot]1-3/+3
2024-10-01net/portmapper: don't treat 0.0.0.0 as a valid IPBrad Fitzpatrick1-0/+4
2024-10-01net/portmapper: don't return unspecified/local external IPsAndrew Dunham2-21/+92
2024-10-01control/controlhttp: fix connectivity on Alaska Air wifiBrad Fitzpatrick2-0/+31