| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-04-15 | cmd/containerboot,cmd/k8s-proxy,kube: add authkey renewal to k8s-proxy (#19221) | Tom Meadows | 1 | -12/+4 |
| 2026-04-09 | cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010) | David Bond | 1 | -2/+1 |
| 2026-04-07 | cmd/containerboot: rate-limit IPN bus netmap notifications | Doug Bryant | 1 | -3/+3 |
| 2026-03-11 | cmd/{containerboot,k8s-operator}: reissue auth keys for broken proxies (#16450) | Tom Proctor | 1 | -6/+60 |
| 2026-03-05 | types/ptr: deprecate ptr.To, use Go 1.26 new | Brad Fitzpatrick | 1 | -2/+1 |
| 2026-02-20 | cmd/containerboot,kube: enable autoadvertisement of Tailscale services on con... | Tom Meadows | 1 | -2/+25 |
| 2026-01-23 | all: remove AUTHORS file and references to it | Will Norris | 1 | -1/+1 |
| 2026-01-14 | cmd/containerboot: allow for automatic ID token generation | Mario Minardi | 1 | -3/+7 |
| 2026-01-07 | cmd/containerboot: add OAuth and WIF auth support (#18311) | Raj Singh | 1 | -2/+12 |
| 2025-12-18 | cmd/containerboot: support egress to Tailscale Service FQDNs (#17493) | Tom Proctor | 1 | -19/+70 |
| 2025-07-22 | cmd/{k8s-proxy,containerboot,k8s-operator},kube: add health check and metrics... | David Bond | 1 | -7/+9 |
| 2025-07-21 | all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572) | Tom Proctor | 1 | -1/+2 |
| 2025-06-27 | cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (... | Tom Proctor | 1 | -11/+8 |
| 2025-05-19 | cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to c... | Irbe Krumina | 1 | -0/+20 |
| 2025-04-09 | cmd/{containerboot,k8s-operator},kube/kubetypes: unadvertise ingress services... | Tom Proctor | 1 | -13/+17 |
| 2025-03-14 | cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303) | Irbe Krumina | 1 | -1/+1 |
| 2025-01-30 | cmd/containerboot: wait for consistent state on shutdown (#14263) | Tom Proctor | 1 | -44/+80 |
| 2025-01-29 | cmd/{k8s-operator,containerboot},kube: ensure egress ProxyGroup proxies don't... | Irbe Krumina | 1 | -8/+14 |
| 2025-01-10 | cmd/containerboot,cmd/k8s-operator: reload tailscaled config (#14342) | Irbe Krumina | 1 | -0/+8 |
| 2024-12-11 | cmd/containerboot: guard kubeClient against nil dereference (#14357) | Bjorn Neergaard | 1 | -2/+4 |
| 2024-12-04 | cmd/{containerboot,k8s-operator},kube/kubetypes: kube Ingress L7 proxies only... | Irbe Krumina | 1 | -12/+37 |
| 2024-12-02 | cmd/containerboot: serve health on local endpoint (#14246) | Tom Proctor | 1 | -18/+58 |
| 2024-11-22 | cmd/{containerboot,k8s-operator},k8s-operator: new options to expose user met... | Tom Proctor | 1 | -0/+8 |
| 2024-11-12 | cmd/{k8s-operator,containerboot},k8s-operator: remove support for proxies bel... | Irbe Krumina | 1 | -5/+4 |
| 2024-10-08 | cmd/{k8s-operator,containerboot},kube/egressservices: fix Pod IP check for du... | Irbe Krumina | 1 | -30/+3 |
| 2024-10-07 | cmd/{containerboot,k8s-operator},k8s-operator,kube: add ProxyGroup controller... | Tom Proctor | 1 | -1/+1 |
| 2024-10-03 | cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, cle... | Irbe Krumina | 1 | -1/+5 |
| 2024-09-29 | cmd/containerboot,kube,util/linuxfw: configure kube egress proxies to route t... | Irbe Krumina | 1 | -21/+45 |
| 2024-09-19 | cmd/containerboot: split main.go (#13517) | Tom Proctor | 1 | -693/+0 |
| 2024-08-14 | cmd/containerboot: optionally serve health check endpoint (#12899) | Irbe Krumina | 1 | -1/+63 |
| 2024-07-05 | cmd/containerboot,cmd/k8s-operator: enable IPv6 for fqdn egress proxies (#12577) | Tom Proctor | 1 | -9/+11 |
| 2024-06-17 | cmd/{containerboot,k8s-operator}: store proxy device ID early to help with cl... | Irbe Krumina | 1 | -12/+59 |
| 2024-06-10 | ipn/{ipnlocal,localapi},net/netkernelconf,client/tailscale,cmd/containerboot:... | Irbe Krumina | 1 | -16/+32 |
| 2024-05-16 | cmd/containerboot: warn when an ingress proxy with an IPv4 tailnet address is... | Irbe Krumina | 1 | -0/+7 |
| 2024-05-10 | cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter... | Irbe Krumina | 1 | -4/+54 |
| 2024-04-29 | cmd/containerboot,kube,ipn/store/kubestore: allow interactive login on kube, ... | Irbe Krumina | 1 | -32/+4 |
| 2024-04-27 | cmd/containerboot: wait on tailscaled process only (#11897) | Irbe Krumina | 1 | -10/+11 |
| 2024-04-23 | cmd{containerboot,k8s-operator},util/linuxfw: support ExternalName Services (... | Irbe Krumina | 1 | -21/+211 |
| 2024-02-08 | cmd/{containerboot,k8s-operator/deploy/manifests}: optionally allow proxying ... | Irbe Krumina | 1 | -22/+92 |
| 2024-01-08 | cmd/containerboot: add EXPERIMENTAL_TS_CONFIGFILE_PATH env var to allow passi... | Irbe Krumina | 1 | -55/+124 |
| 2024-01-04 | cmd/containerboot: don't parse empty subnet routes (#10738) | Irbe Krumina | 1 | -1/+1 |
| 2024-01-04 | cmd/containerboot: ensure that subnet routes can be unset. (#10734) | Irbe Krumina | 1 | -11/+32 |
| 2023-12-08 | cmd/containerboot: symlink TS_SOCKET to socket expected by CLI | Maisem Ali | 1 | -0/+18 |
| 2023-12-05 | linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter | Naman Sood | 1 | -1/+1 |
| 2023-11-24 | cmd/{containerboot,k8s-operator}: allow users to define tailnet egress target... | Irbe Krumina | 1 | -30/+91 |
| 2023-11-22 | containerboot: Add TS_ACCEPT_ROUTES (#10176) | Claire Wang | 1 | -1/+1 |
| 2023-11-16 | cmd/containerboot: fix unclean shutdown (#10035) | Irbe Krumina | 1 | -75/+124 |
| 2023-10-16 | cmd/containerboot: revert to using tailscale up | Maisem Ali | 1 | -24/+30 |
| 2023-10-12 | cmd/containerboot: fix time based serveConfig watcher | Maisem Ali | 1 | -6/+7 |
| 2023-10-11 | cmd/containerboot: use linuxfw.NetfilterRunner | Maisem Ali | 1 | -55/+36 |