| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-04-23 | go.mod: bump github.com/google/go-containerregistry (#19500) | Andrew Lytvynov | 1 | -1/+2 |
| 2026-04-17 | cmd/k8s-operator: add e2e test setup and l7 ingress test for multi-tailnet (#... | BeckyPauley | 2 | -27/+328 |
| 2026-04-17 | cmd/k8s-operator: add priorityClassName support to helm chart (#19236) | Bjorn Stange | 2 | -0/+5 |
| 2026-04-15 | cmd/k8s-operator: add affinity rules to DNSConfig (#19360) | David Bond | 4 | -0/+1783 |
| 2026-04-15 | control/controlclient: enable request signatures on macOS (#19317) | Jonathan Nobels | 1 | -1/+1 |
| 2026-04-09 | cmd/k8s-operator: set PreferDualStack on ProxyGroup egress services (#19194) | Fernando Serboncini | 2 | -3/+5 |
| 2026-04-09 | cmd/k8s-operator: migrate to tailscale-client-go-v2 (#19010) | David Bond | 22 | -880/+644 |
| 2026-04-05 | cmd/vet: add subtestnames analyzer; fix all existing violations | Brad Fitzpatrick | 4 | -26/+30 |
| 2026-04-02 | cmd/k8s-operator: add further E2E tests for Ingress (#19219) | BeckyPauley | 4 | -74/+416 |
| 2026-03-24 | derp,types,util: use bufio Peek+Discard for allocation-free fast reads (#19067) | Mike O'Driscoll | 1 | -0/+1 |
| 2026-03-20 | wgengine/magicsock,control/controlclient: do not overwrite discokey with old ... | Claus Lensbøl | 1 | -0/+1 |
| 2026-03-13 | cmd/k8s-operator: fix Service reconcile triggers for default ProxyClass (#18983) | Tom Proctor | 5 | -90/+331 |
| 2026-03-11 | cmd/{containerboot,k8s-operator}: reissue auth keys for broken proxies (#16450) | Tom Proctor | 6 | -102/+434 |
| 2026-03-10 | ipn/ipnlocal, feature/ssh: move SSH code out of LocalBackend to feature | Brad Fitzpatrick | 1 | -8/+5 |
| 2026-03-10 | cmd/k8s-operator: use correct tailnet client for L7 & L3 ingresses (#18749) | David Bond | 12 | -322/+403 |
| 2026-03-09 | appc,feature/conn25: conn25: send address assignments to connector | Fran Bull | 1 | -1/+1 |
| 2026-03-06 | all: use Go 1.26 things, run most gofix modernizers | Brad Fitzpatrick | 15 | -66/+42 |
| 2026-03-05 | types/ptr: deprecate ptr.To, use Go 1.26 new | Brad Fitzpatrick | 26 | -187/+155 |
| 2026-03-05 | cmd/k8s-proxy: use L4 TCPForward instead of L7 HTTP proxy (#18179) | Raj Singh | 1 | -1/+1 |
| 2026-03-05 | cmd/k8s-operator: remove deprecated TS_EXPERIMENTAL_KUBE_API_EVENTS (#18893) | BeckyPauley | 1 | -0/+10 |
| 2026-03-04 | go.toolchain.branch: switch to Go 1.26 | Brad Fitzpatrick | 1 | -16/+22 |
| 2026-03-04 | cmd/tailscale,ipn,net/netutil: remove rp_filter strict mode warnings (#18863) | Mike O'Driscoll | 1 | -1/+1 |
| 2026-02-26 | go.mod: bump gvisor | Brad Fitzpatrick | 1 | -2/+2 |
| 2026-02-25 | cmd/k8s-operator: add exit node example (#18087) | Chris Mosetick | 2 | -2/+28 |
| 2026-02-20 | cmd/containerboot,kube: enable autoadvertisement of Tailscale services on con... | Tom Meadows | 3 | -0/+10 |
| 2026-02-20 | cmd/k8s-operator/e2e: mark TestIngress flaky (#18773) | Tom Proctor | 2 | -1/+69 |
| 2026-02-18 | cmd/k8s-operator,k8s-operator: define ProxyGroupPolicy reconciler (#18654) | David Bond | 15 | -20/+379 |
| 2026-02-17 | ipn/ipnlocal: add basic support for netmap caching (#18530) | M. J. Fromberger | 1 | -0/+1 |
| 2026-02-13 | k8s-operator,cmd/k8s-operator: define ProxyGroupPolicy CRD (#18614) | David Bond | 1 | -0/+139 |
| 2026-02-09 | go.mod: update bart dep to v0.26.1 (#18659) | Amal Bansode | 1 | -2/+7 |
| 2026-02-03 | cmd/k8s-operator,k8s-operator:ensure that recorder replicas default to 1 (#18... | Tom Meadows | 2 | -0/+2 |
| 2026-01-23 | all: remove AUTHORS file and references to it | Will Norris | 64 | -64/+64 |
| 2026-01-21 | cmd/k8s-operator,k8s-operator: Allow the use of multiple tailnets (#18344) | David Bond | 17 | -64/+548 |
| 2026-01-14 | cmd,feature: add identity token auto generation for workload identity (#18373) | Danni Popova | 1 | -0/+72 |
| 2026-01-09 | go.mod: bump github.com/containerd/containerd@v1.7.29 (#18374) | Patrick O'Doherty | 1 | -4/+4 |
| 2026-01-08 | net/portmapper, go.mod: unfork our goupnp dependency | Andrew Dunham | 1 | -6/+6 |
| 2026-01-08 | cmd/k8s-operator/e2e,go.mod: remove client v2 dependency | Tom Proctor | 1 | -31/+50 |
| 2026-01-08 | cmd/k8s-operator/e2e: run self-contained e2e tests with devcontrol (#17415) | Tom Proctor | 12 | -196/+1349 |
| 2026-01-06 | wgengine/magicsock: extract IMDS utilities into a standalone package (#18334) | Alex Valiushko | 1 | -0/+1 |
| 2025-12-19 | cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extensi... | Irbe Krumina | 3 | -0/+26 |
| 2025-12-17 | cmd/k8s-operator: fixes helm template for oauth secret volume mount (#18230) | Tom Meadows | 2 | -23/+27 |
| 2025-12-15 | cmd/k8s-operator: fix statefulset template yaml indentation (#18194) | Tom Meadows | 5 | -21/+62 |
| 2025-12-08 | cmd/k8s-operator: warn if users attempt to expose a headless Service (#18140) | Irbe Krumina | 2 | -86/+88 |
| 2025-12-08 | cmd/k8s-operator: don't log errors on not found objects. (#18142) | Irbe Krumina | 1 | -3/+10 |
| 2025-12-02 | tsnet: enable node registration via federated identity | Gesa Stupperich | 1 | -0/+2 |
| 2025-12-02 | cleanup: fix typos across multiple files | Naasir | 1 | -1/+1 |
| 2025-12-01 | k8s-operator: Fix typos in egress-pod-readiness.go | Shaikh Naasir | 1 | -2/+2 |
| 2025-11-28 | cmd/k8s-operator fix populateTLSSecret on tests (#18088) | Fernando Serboncini | 1 | -2/+2 |
| 2025-11-28 | cmd/k8s-operator: add support for taiscale.com/http-redirect (#17596) | Fernando Serboncini | 5 | -36/+429 |
| 2025-11-25 | cmd/k8s-operator: allow HA ingresses to be deleted when VIP service does not ... | David Bond | 3 | -26/+71 |