summaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)AuthorFilesLines
2023-11-25wipdanderson/debug-gardenDavid Anderson2-0/+4
2023-11-23flake.nix: use vendorHash instead of vendorSha256David Anderson1-3/+3
vendorSha256 is getting retired, and throws warning in builds. Updates #cleanup Signed-off-by: David Anderson <danderson@tailscale.com>
2023-11-23go.mod.sri: update SRI hash for go.mod changesFlakes Updater3-3/+3
Signed-off-by: Flakes Updater <noreply+flakes-updater@tailscale.com>
2023-11-22words: crikey! what a beauty of a listCharlotte Brandhorst-Satzkorn2-0/+33
If I have to add a tail, or a scale, mate, I will add it. Updates tailscale/corp#14698 Signed-off-by: Charlotte Brandhorst-Satzkorn <charlotte@tailscale.com>
2023-11-22appc,ipn/local: support wildcard when matching app-connectorsTom DNetto2-8/+11
Updates: ENG-2453 Signed-off-by: Tom DNetto <tom@tailscale.com>
2023-11-22wgengine/magicsock: fix typo in Conn.handlePingLocked() (#10365)Jordan Whited1-1/+1
Updates #cleanup Signed-off-by: Jordan Whited <jordan@tailscale.com>
2023-11-22util/httpm: don't run test if .git doesn't existAndrew Dunham1-2/+10
Updates #9635 Signed-off-by: Andrew Dunham <andrew@du.nham.ca> Change-Id: I9089200f9327605036c88fc12834acece0c11694
2023-11-22containerboot: Add TS_ACCEPT_ROUTES (#10176)Claire Wang2-1/+17
Fixes tailscale/corp#15596 Signed-off-by: Claire Wang <claire@tailscale.com>
2023-11-22cmd/k8s-operator: helm chart add missing keys (#10296)Gabriel Martinez1-3/+17
* cmd/k8s-operator: add missing keys to Helm values file Updates #10182 Signed-off-by: Gabriel Martinez <gabrielmartinez@sisti.pt>
2023-11-21go.mod: bump wireguard-go (#10352)Jordan Whited2-3/+3
This pulls in tailscale/wireguard-go@8cc8b8b and tailscale/wireguard-go@cc193a0, which improve throughput and latency under load. Updates tailscale/corp#11061 Signed-off-by: Jordan Whited <jordan@tailscale.com>
2023-11-21flake: fixup version embedding (#9997)Cole Helbling1-2/+2
It looks like `gitCommitStamp` is the new "entrypoint" for setting this information. Fixes #9996. Signed-off-by: Cole Helbling <cole.helbling@determinate.systems>
2023-11-21ci: report test coverage to coveralls.ioPercy Wegmann5-27/+194
This records test coverage for the amd64 no race tests and uploads the results to coveralls.io. Updates #cleanup Signed-off-by: Ox Cart <ox.to.a.cart@gmail.com>
2023-11-21cmd/k8s-operator: truncate long StatefulSet name prefixes (#10343)Irbe Krumina4-1/+84
Kubernetes can generate StatefulSet names that are too long and result in invalid Pod revision hash label values. Calculate whether a StatefulSet name generated for a Service or Ingress will be too long and if so, truncate it. Updates tailscale/tailscale#10284 Signed-off-by: Irbe Krumina <irbe@tailscale.com>
2023-11-20util/set: implement json.Marshaler/Unmarshaler (#10308)Andrew Lytvynov2-0/+60
Marshal as a JSON list instead of a map. Because set elements are `comparable` and not `cmp.Ordered`, we cannot easily sort the items before marshaling. Updates #cleanup Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
2023-11-20cmd/k8s-operator: log user/group impersonated by apiserver proxy (#10334)Irbe Krumina2-13/+24
Updates tailscale/tailscale#10127 Signed-off-by: Irbe Krumina <irbe@tailscale.com>
2023-11-20cmd/k8s-operator: fix chart syntax error (#10333)Irbe Krumina1-1/+1
Updates #9222 Signed-off-by: Irbe Krumina <irbe@tailscale.com>
2023-11-18licenses: update android licensesLicense Updater1-1/+1
Signed-off-by: License Updater <noreply+license-updater@tailscale.com>
2023-11-18cmd/tailscale/cli: add debug function to print the netmapDavid Anderson1-0/+37
It's possible to do this with a combination of watch-ipn and jq, but looking at the netmap while debugging is quite common, so it's nice to have a one-shot command to get it. Updates #cleanup Signed-off-by: David Anderson <danderson@tailscale.com>
2023-11-18cmd/tailscale/cli: make 'debug watch-ipn' play nice with jqDavid Anderson1-3/+6
jq doens't like non-json output in the json stream, and works more happily when the input stream EOFs at some point. Move non-json words to stderr, and add a parameter to stop watching and exit after some number of objects. Updates #cleanup Signed-off-by: David Anderson <danderson@tailscale.com>
2023-11-18Fix Empty Resolver SetRyan Petris1-1/+1
Config.singleResolverSet returns true if all routes have the same resolvers, even if the routes have no resolvers. If none of the routes have a specific resolver, the default should be used instead. Therefore, check for more than 0 instead of nil. Signed-off-by: Ryan Petris <ryan@petris.net>
2023-11-18Fix potential goroutine leak in syncs/watchdog.goUri Gorelik1-1/+4
Depending on how the preemption will occur, in some scenarios sendc would have blocked indefinitely even after cancelling the context. Fixes #10315 Signed-off-by: Uri Gorelik <uri.gore@gmail.com>
2023-11-17go.mod.sri: update SRI hash for go.mod changesFlakes Updater3-3/+3
Signed-off-by: Flakes Updater <noreply+flakes-updater@tailscale.com>
2023-11-17go.mod: update web-client-prebuilt moduleOSS Updater2-3/+3
Signed-off-by: OSS Updater <noreply+oss-updater@tailscale.com>
2023-11-17client/web: add advanced login optionsWill Norris8-11/+206
This adds an expandable section of the login view to allow users to specify an auth key and an alternate control URL. Input and Collapsible components and accompanying styles were brought over from the adminpanel. Updates #10261 Signed-off-by: Will Norris <will@tailscale.com>
2023-11-17go.mod.sri: update SRI hash for go.mod changesFlakes Updater3-3/+3
Signed-off-by: Flakes Updater <noreply+flakes-updater@tailscale.com>
2023-11-17go.mod: update web-client-prebuilt moduleOSS Updater2-3/+3
Signed-off-by: OSS Updater <noreply+oss-updater@tailscale.com>
2023-11-17client/web: add Inter fontSonia Appasamy23-13/+51
Adds Inter font and uses it as the default for the web UI. Creates a new /assets folder to house the /fonts, and moves /icons to live here too. Updates #10261 Signed-off-by: Sonia Appasamy <sonia@tailscale.com>
2023-11-17ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profileMarwan Sulaiman10-44/+131
This PR starts to persist the NetMap tailnet name in SetPrefs so that tailscaled clients can use this value to disambiguate fast user switching from one tailnet to another that are under the same exact login. We will also try to backfill this information during backend starts and profile switches so that users don't have to re-authenticate their profile. The first client to use this new information is the CLI in 'tailscale switch -list' which now uses text/tabwriter to display the ID, Tailnet, and Account. Since account names are ambiguous, we allow the user to pass 'tailscale switch ID' to specify the exact tailnet they want to switch to. Updates #9286 Signed-off-by: Marwan Sulaiman <marwan@tailscale.com>
2023-11-17client/web: add exit node selectorSonia Appasamy7-65/+741
Add exit node selector (in full management client only) that allows for advertising as an exit node, or selecting another exit node on the Tailnet for use. Updates #10261 Signed-off-by: Sonia Appasamy <sonia@tailscale.com>
2023-11-17licenses: update android licensesLicense Updater1-1/+6
Signed-off-by: License Updater <noreply+license-updater@tailscale.com>
2023-11-17licenses: update win/apple licensesLicense Updater1-0/+1
Signed-off-by: License Updater <noreply+license-updater@tailscale.com>
2023-11-17licenses: update tailscale{,d} licensesLicense Updater1-1/+2
Signed-off-by: License Updater <noreply+license-updater@tailscale.com>
2023-11-17client/web: split login from nodeUpdateWill Norris4-76/+116
This creates a new /api/up endpoint which is exposed in the login client, and is solely focused on logging in. Login has been removed from the nodeUpdate endpoint. This also adds support in the LoginClientView for a stopped node that just needs to reconnect, but not necessarily reauthenticate. This follows the same pattern in `tailscale up` of just setting the WantRunning user pref. Updates tailscale/corp#14335 Signed-off-by: Will Norris <will@tailscale.com>
2023-11-17cmd/tailscale/cli: correct app connector help text in setJames Tucker1-1/+1
Updates tailscale/corp#15437 Signed-off-by: James Tucker <james@tailscale.com>
2023-11-17client/web: hide unimplemented linksSonia Appasamy1-4/+5
Hiding links to unimplemented settings pages. Updates #10261 Signed-off-by: Sonia Appasamy <sonia@tailscale.com>
2023-11-17control/controlclient: support incremental packet filter updates [capver 81]Brad Fitzpatrick4-4/+156
Updates #10299 Change-Id: I87e4235c668a1db7de7ef1abc743f0beecb86d3d Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2023-11-17util/syspolicy: add caching handler (#10288)Claire Wang4-7/+371
Fixes tailscale/corp#15850 Co-authored-by: Adrian Dewhurst <adrian@tailscale.com> Signed-off-by: Claire Wang <claire@tailscale.com>
2023-11-17ssh/tailssh: use control server time instead of local timeOx Cart2-0/+10
This takes advantage of existing functionality in ipn/ipnlocal to adjust the local clock based on periodic time signals from the control server. This way, when checking things like SSHRule expirations, calculations are protected incorrectly set local clocks. Fixes tailscale/corp#15796 Signed-off-by: Percy Wegmann <percy@tailscale.com>
2023-11-16{client/web},{ipn/ipnlocal}: replace localapi debug-web-client endpointSonia Appasamy5-144/+125
This change removes the existing debug-web-client localapi endpoint and replaces it with functions passed directly to the web.ServerOpts when constructing a web.ManageServerMode client. The debug-web-client endpoint previously handled making noise requests to the control server via the /machine/webclient/ endpoints. The noise requests must be made from tailscaled, which has the noise connection open. But, now that the full client is served from tailscaled, we no longer need to proxy this request over the localapi. Updates tailscale/corp#14335 Signed-off-by: Sonia Appasamy <sonia@tailscale.com>
2023-11-16health: don't report a warning in DERP homeless modeBrad Fitzpatrick2-12/+20
Updates #3363 Updates tailscale/corp#396 Change-Id: Ibfb0496821cb58a78399feb88d4206d81e95ca0f Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2023-11-16ipn/ipnlocal: add c2n method to check on TLS cert fetch statusBrad Fitzpatrick6-2/+236
So the control plane can delete TXT records more aggressively after client's done with ACME fetch. Updates tailscale/corp#15848 Change-Id: I4f1140305bee11ee3eee93d4fec3aef2bd6c5a7e Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2023-11-16cmd/containerboot: fix unclean shutdown (#10035)Irbe Krumina1-75/+124
* cmd/containerboot: shut down cleanly on SIGTERM Make sure that tailscaled watcher returns when SIGTERM is received and also that it shuts down before tailscaled exits. Updates tailscale/tailscale#10090 Signed-off-by: Irbe Krumina <irbe@tailscale.com>
2023-11-16client/web: fix margins on login popoverSonia Appasamy1-2/+2
Updates #10261 Signed-off-by: Sonia Appasamy <sonia@tailscale.com>
2023-11-16tsnet: add option to run integrated web clientWill Norris2-1/+7
Updates #10261 Signed-off-by: Will Norris <will@tailscale.com>
2023-11-16ipn/ipnlocal: log and don't return full file serve error (#10174)Tyler Smalley1-2/+4
Previously we would return the full error from Stat or Open, possibily exposing the full file path. This change will log the error and return the generic error message "an error occurred reading the file or directory". Updates tailscale/corp#15485 Signed-off-by: Tyler Smalley <tyler@tailscale.com>
2023-11-16client/web: when readonly, add check for TS connectionSonia Appasamy1-4/+53
When the viewing user is accessing a webclient not over Tailscale, they must connect over Tailscale before being able to log into the full management client, which is served over TS. This change adds a check that the user is able to access the node's tailscale IP. If not able to, the signin button is disabled. We'll also be adding Copy here to help explain to the user that they must connect to Tailscale before proceeding. Updates #10261 Signed-off-by: Sonia Appasamy <sonia@tailscale.com>
2023-11-16.github: build gocross using regular GOPROXY settingsWill Norris1-0/+1
This `go get` action has been running very slowly, and I'm pretty sure it's because we're building gocross on the first `./tool/go` run, and because we've set `GOPROXY=direct`, it's going directly to GitHub to fetch all of the gocross dependencies. Updates #cleanup Signed-off-by: Will Norris <will@tailscale.com>
2023-11-16go.mod.sri: update SRI hash for go.mod changesFlakes Updater3-3/+3
Signed-off-by: Flakes Updater <noreply+flakes-updater@tailscale.com>
2023-11-16go.mod: update web-client-prebuilt moduleOSS Updater2-3/+3
Signed-off-by: OSS Updater <noreply+oss-updater@tailscale.com>
2023-11-16client/web: allow login client to still run tailscale upWill Norris1-0/+4
I don't believe this has ever worked, since we didn't allow POST requests in the login client. But previously, we were primarily using the legacy client, so it didn't really matter. Now that we've removed the legacy client, we have no way to login. This fixes the login client, allowing it to login, but it still needs to be refactored to expose a dedicated login method, without exposing all the node update functionality. Updates tailscale/corp#14335 Signed-off-by: Will Norris <will@tailscale.com>
Copyright © 2025 - 2026 Wayne Cole. WTFPL. Attribution appreciated. No warranty. Not liable for bodily damages.