summaryrefslogtreecommitdiffhomepage
path: root/cmd/k8s-operator
AgeCommit message (Expand)AuthorFilesLines
2025-06-20cmd/k8s-operator: remove conffile hashing mechanism (#16335)annotationsIrbe Krumina7-238/+74
2025-06-16cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262)Irbe Krumina3-154/+183
2025-06-12cmd/k8s-operator: ensure status update errors are displayed to users (#16251)Irbe Krumina4-23/+24
2025-06-10cmd/tailscale/cli: add a risk message about rp_filterAnton Tolchanov1-1/+1
2025-06-09cmd/k8s-operator: explicitly set tcp on VIPService port configuration for Ing...Tom Meadows2-9/+9
2025-05-29go.mod: bump golang.org/x depsBrad Fitzpatrick1-1/+2
2025-05-23cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (...Irbe Krumina6-25/+122
2025-05-22client/web: add Sec-Fetch-Site CSRF protection (#16046)Patrick O'Doherty1-6/+3
2025-05-20cmd/k8s-operator: fix Tailscale Service API errors check (#16020)Irbe Krumina3-11/+5
2025-05-19cmd/derper, net/tlsdial: fix client's self-signed cert validationBrad Fitzpatrick1-0/+1
2025-05-19cmd/k8s-operator: rename VIPService -> Tailscale Service in L3 HA Service Rec...Tom Meadows3-137/+137
2025-05-19cmd/k8s-operator: warn if HA Service is applied, but VIPService feature flag ...Tom Meadows1-0/+10
2025-05-19cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (...Tom Meadows11-21/+1427
2025-05-19{cmd,}/k8s-operator: support IRSA for Recorder resources (#15913)Tom Proctor6-25/+288
2025-05-14cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet withou...Irbe Krumina3-145/+191
2025-05-09wgengine/magicsock: re-shape relayManager to use an event loop (#15935)Jordan Whited1-0/+1
2025-05-09ipn/ipnlocal,net/dns/resolver: use the user dialer and routes for DNS forward...Nick Khyl1-1/+1
2025-05-08feature/taildrop, ipn/ipnlocal: remove leftover dup calls to osshareBrad Fitzpatrick1-1/+0
2025-05-07tsnet: don't depend on condregister & its default tailscaled featuresBrad Fitzpatrick1-36/+7
2025-05-06taildrop: merge taildrop and feature/taildrop packages togetherBrad Fitzpatrick1-1/+0
2025-05-06feature/taildrop: move rest of Taildrop out of LocalBackendBrad Fitzpatrick1-2/+2
2025-05-06cmd/k8s-operator,k8s-operator/api-proxy: move k8s proxy code to library (#15857)Tom Proctor4-625/+7
2025-05-02hostinfo,tailcfg: report TPM availability on windows/linux (#15831)Andrew Lytvynov1-0/+8
2025-04-25types/mapx, ipn/ipnext: add ordered map, akin to set.SliceBrad Fitzpatrick1-0/+1
2025-04-17cmd/k8s-operator: default ingress paths to '/' if not specified by user (#15706)Tom Meadows2-6/+176
2025-04-16feature/taildrop: start moving Taildrop out of LocalBackendBrad Fitzpatrick1-2/+3
2025-04-16all: construct new System values with an event bus pre-populatedM. J. Fromberger1-1/+1
2025-04-16tsd: wire up the event bus to tailscaledDavid Anderson1-2/+8
2025-04-16feature/{condregister,relayserver}: implement the skeleton for the relayserve...Jordan Whited1-1/+3
2025-04-15k8s-operator: add age column to all custom resources (#15663)Satyam Soni6-0/+30
2025-04-11cmd/tailscaled,ipn/{auditlog,desktop,ipnext,ipnlocal},tsd: extract LocalBacke...Nick Khyl1-1/+1
2025-04-09cmd/{containerboot,k8s-operator},kube/kubetypes: unadvertise ingress services...Tom Proctor1-0/+10
2025-04-08net/{netx,memnet},all: add netx.DialFunc, move memnet Network implBrad Fitzpatrick1-0/+1
2025-03-28cmd/k8s-operator,k8s-operator: enable HA Ingress again. (#15453)Irbe Krumina4-2/+184
2025-03-28cmd/tailscaled,ipn/{auditlog,ipnlocal},tsd: omit auditlog unless explicitly i...Nick Khyl1-1/+0
2025-03-26cmd/k8s-operator,k8s-operator: disable HA Ingress before stable release (#15433)v1.83.0-preIrbe Krumina4-184/+2
2025-03-26cmd/{k8s-operator,containerboot}: check TLS cert before advertising VIPServic...Irbe Krumina3-31/+158
2025-03-21cmd/k8s-operator,internal/client/tailscale: use VIPService annotations for ow...Tom Proctor2-71/+90
2025-03-21cmd/k8s-operator,k8s-operator: allow optionally using LE staging endpoint for...Irbe Krumina6-168/+397
2025-03-19cmd/k8s-operator: update ProxyGroup config Secrets instead of patch (#15353)Tom Proctor2-20/+12
2025-03-19cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode ...Irbe Krumina17-66/+254
2025-03-19cmd/k8s-operator: wait for VIPService before updating HA Ingress status (#15343)Tom Proctor6-51/+158
2025-03-18tsweb: split promvarz into an optional dependencyDavid Anderson1-3/+3
2025-03-18cmd/k8s-operator: ensure old VIPServices are cleaned up (#15344)Tom Proctor2-17/+60
2025-03-12control/controlclient, ipn: add client audit logging (#14950)Jonathan Nobels1-0/+1
2025-03-11tsnet,wgengine: fix src to primary Tailscale IP for TCP dialsFran Bull1-0/+1
2025-03-06cmd/k8s-operator: ensure HA Ingress can operate in multicluster mode. (#15157)Irbe Krumina4-187/+472
2025-03-06cmd/k8s-operator: advertise VIPServices in ProxyGroup config (#14946)Tom Proctor6-36/+251
2025-02-19go.toolchain.branch: update to Go 1.24 (#15016)Brad Fitzpatrick1-26/+52
2025-02-18client/tailscale,cmd/k8s-operator,internal/client/tailscale: move VIP service...Percy Wegmann4-155/+22