| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-06-20 | cmd/k8s-operator: remove conffile hashing mechanism (#16335)annotations | Irbe Krumina | 7 | -238/+74 |
| 2025-06-16 | cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262) | Irbe Krumina | 3 | -154/+183 |
| 2025-06-12 | cmd/k8s-operator: ensure status update errors are displayed to users (#16251) | Irbe Krumina | 4 | -23/+24 |
| 2025-06-10 | cmd/tailscale/cli: add a risk message about rp_filter | Anton Tolchanov | 1 | -1/+1 |
| 2025-06-09 | cmd/k8s-operator: explicitly set tcp on VIPService port configuration for Ing... | Tom Meadows | 2 | -9/+9 |
| 2025-05-29 | go.mod: bump golang.org/x deps | Brad Fitzpatrick | 1 | -1/+2 |
| 2025-05-23 | cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (... | Irbe Krumina | 6 | -25/+122 |
| 2025-05-22 | client/web: add Sec-Fetch-Site CSRF protection (#16046) | Patrick O'Doherty | 1 | -6/+3 |
| 2025-05-20 | cmd/k8s-operator: fix Tailscale Service API errors check (#16020) | Irbe Krumina | 3 | -11/+5 |
| 2025-05-19 | cmd/derper, net/tlsdial: fix client's self-signed cert validation | Brad Fitzpatrick | 1 | -0/+1 |
| 2025-05-19 | cmd/k8s-operator: rename VIPService -> Tailscale Service in L3 HA Service Rec... | Tom Meadows | 3 | -137/+137 |
| 2025-05-19 | cmd/k8s-operator: warn if HA Service is applied, but VIPService feature flag ... | Tom Meadows | 1 | -0/+10 |
| 2025-05-19 | cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (... | Tom Meadows | 11 | -21/+1427 |
| 2025-05-19 | {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) | Tom Proctor | 6 | -25/+288 |
| 2025-05-14 | cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet withou... | Irbe Krumina | 3 | -145/+191 |
| 2025-05-09 | wgengine/magicsock: re-shape relayManager to use an event loop (#15935) | Jordan Whited | 1 | -0/+1 |
| 2025-05-09 | ipn/ipnlocal,net/dns/resolver: use the user dialer and routes for DNS forward... | Nick Khyl | 1 | -1/+1 |
| 2025-05-08 | feature/taildrop, ipn/ipnlocal: remove leftover dup calls to osshare | Brad Fitzpatrick | 1 | -1/+0 |
| 2025-05-07 | tsnet: don't depend on condregister & its default tailscaled features | Brad Fitzpatrick | 1 | -36/+7 |
| 2025-05-06 | taildrop: merge taildrop and feature/taildrop packages together | Brad Fitzpatrick | 1 | -1/+0 |
| 2025-05-06 | feature/taildrop: move rest of Taildrop out of LocalBackend | Brad Fitzpatrick | 1 | -2/+2 |
| 2025-05-06 | cmd/k8s-operator,k8s-operator/api-proxy: move k8s proxy code to library (#15857) | Tom Proctor | 4 | -625/+7 |
| 2025-05-02 | hostinfo,tailcfg: report TPM availability on windows/linux (#15831) | Andrew Lytvynov | 1 | -0/+8 |
| 2025-04-25 | types/mapx, ipn/ipnext: add ordered map, akin to set.Slice | Brad Fitzpatrick | 1 | -0/+1 |
| 2025-04-17 | cmd/k8s-operator: default ingress paths to '/' if not specified by user (#15706) | Tom Meadows | 2 | -6/+176 |
| 2025-04-16 | feature/taildrop: start moving Taildrop out of LocalBackend | Brad Fitzpatrick | 1 | -2/+3 |
| 2025-04-16 | all: construct new System values with an event bus pre-populated | M. J. Fromberger | 1 | -1/+1 |
| 2025-04-16 | tsd: wire up the event bus to tailscaled | David Anderson | 1 | -2/+8 |
| 2025-04-16 | feature/{condregister,relayserver}: implement the skeleton for the relayserve... | Jordan Whited | 1 | -1/+3 |
| 2025-04-15 | k8s-operator: add age column to all custom resources (#15663) | Satyam Soni | 6 | -0/+30 |
| 2025-04-11 | cmd/tailscaled,ipn/{auditlog,desktop,ipnext,ipnlocal},tsd: extract LocalBacke... | Nick Khyl | 1 | -1/+1 |
| 2025-04-09 | cmd/{containerboot,k8s-operator},kube/kubetypes: unadvertise ingress services... | Tom Proctor | 1 | -0/+10 |
| 2025-04-08 | net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl | Brad Fitzpatrick | 1 | -0/+1 |
| 2025-03-28 | cmd/k8s-operator,k8s-operator: enable HA Ingress again. (#15453) | Irbe Krumina | 4 | -2/+184 |
| 2025-03-28 | cmd/tailscaled,ipn/{auditlog,ipnlocal},tsd: omit auditlog unless explicitly i... | Nick Khyl | 1 | -1/+0 |
| 2025-03-26 | cmd/k8s-operator,k8s-operator: disable HA Ingress before stable release (#15433)v1.83.0-pre | Irbe Krumina | 4 | -184/+2 |
| 2025-03-26 | cmd/{k8s-operator,containerboot}: check TLS cert before advertising VIPServic... | Irbe Krumina | 3 | -31/+158 |
| 2025-03-21 | cmd/k8s-operator,internal/client/tailscale: use VIPService annotations for ow... | Tom Proctor | 2 | -71/+90 |
| 2025-03-21 | cmd/k8s-operator,k8s-operator: allow optionally using LE staging endpoint for... | Irbe Krumina | 6 | -168/+397 |
| 2025-03-19 | cmd/k8s-operator: update ProxyGroup config Secrets instead of patch (#15353) | Tom Proctor | 2 | -20/+12 |
| 2025-03-19 | cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode ... | Irbe Krumina | 17 | -66/+254 |
| 2025-03-19 | cmd/k8s-operator: wait for VIPService before updating HA Ingress status (#15343) | Tom Proctor | 6 | -51/+158 |
| 2025-03-18 | tsweb: split promvarz into an optional dependency | David Anderson | 1 | -3/+3 |
| 2025-03-18 | cmd/k8s-operator: ensure old VIPServices are cleaned up (#15344) | Tom Proctor | 2 | -17/+60 |
| 2025-03-12 | control/controlclient, ipn: add client audit logging (#14950) | Jonathan Nobels | 1 | -0/+1 |
| 2025-03-11 | tsnet,wgengine: fix src to primary Tailscale IP for TCP dials | Fran Bull | 1 | -0/+1 |
| 2025-03-06 | cmd/k8s-operator: ensure HA Ingress can operate in multicluster mode. (#15157) | Irbe Krumina | 4 | -187/+472 |
| 2025-03-06 | cmd/k8s-operator: advertise VIPServices in ProxyGroup config (#14946) | Tom Proctor | 6 | -36/+251 |
| 2025-02-19 | go.toolchain.branch: update to Go 1.24 (#15016) | Brad Fitzpatrick | 1 | -26/+52 |
| 2025-02-18 | client/tailscale,cmd/k8s-operator,internal/client/tailscale: move VIP service... | Percy Wegmann | 4 | -155/+22 |