| Age | Commit message (Expand) | Author | Files | Lines |
| 2026-02-26 | go.mod: bump gvisor | Brad Fitzpatrick | 1 | -2/+2 |
| 2026-02-25 | cmd/k8s-operator: add exit node example (#18087) | Chris Mosetick | 2 | -2/+28 |
| 2026-02-20 | cmd/containerboot,kube: enable autoadvertisement of Tailscale services on con... | Tom Meadows | 3 | -0/+10 |
| 2026-02-20 | cmd/k8s-operator/e2e: mark TestIngress flaky (#18773) | Tom Proctor | 2 | -1/+69 |
| 2026-02-18 | cmd/k8s-operator,k8s-operator: define ProxyGroupPolicy reconciler (#18654) | David Bond | 15 | -20/+379 |
| 2026-02-17 | ipn/ipnlocal: add basic support for netmap caching (#18530) | M. J. Fromberger | 1 | -0/+1 |
| 2026-02-13 | k8s-operator,cmd/k8s-operator: define ProxyGroupPolicy CRD (#18614) | David Bond | 1 | -0/+139 |
| 2026-02-09 | go.mod: update bart dep to v0.26.1 (#18659) | Amal Bansode | 1 | -2/+7 |
| 2026-02-03 | cmd/k8s-operator,k8s-operator:ensure that recorder replicas default to 1 (#18... | Tom Meadows | 2 | -0/+2 |
| 2026-01-23 | all: remove AUTHORS file and references to it | Will Norris | 64 | -64/+64 |
| 2026-01-21 | cmd/k8s-operator,k8s-operator: Allow the use of multiple tailnets (#18344) | David Bond | 17 | -64/+548 |
| 2026-01-14 | cmd,feature: add identity token auto generation for workload identity (#18373) | Danni Popova | 1 | -0/+72 |
| 2026-01-09 | go.mod: bump github.com/containerd/containerd@v1.7.29 (#18374) | Patrick O'Doherty | 1 | -4/+4 |
| 2026-01-08 | net/portmapper, go.mod: unfork our goupnp dependency | Andrew Dunham | 1 | -6/+6 |
| 2026-01-08 | cmd/k8s-operator/e2e,go.mod: remove client v2 dependency | Tom Proctor | 1 | -31/+50 |
| 2026-01-08 | cmd/k8s-operator/e2e: run self-contained e2e tests with devcontrol (#17415) | Tom Proctor | 12 | -196/+1349 |
| 2026-01-06 | wgengine/magicsock: extract IMDS utilities into a standalone package (#18334) | Alex Valiushko | 1 | -0/+1 |
| 2025-12-19 | cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extensi... | Irbe Krumina | 3 | -0/+26 |
| 2025-12-17 | cmd/k8s-operator: fixes helm template for oauth secret volume mount (#18230) | Tom Meadows | 2 | -23/+27 |
| 2025-12-15 | cmd/k8s-operator: fix statefulset template yaml indentation (#18194) | Tom Meadows | 5 | -21/+62 |
| 2025-12-08 | cmd/k8s-operator: warn if users attempt to expose a headless Service (#18140) | Irbe Krumina | 2 | -86/+88 |
| 2025-12-08 | cmd/k8s-operator: don't log errors on not found objects. (#18142) | Irbe Krumina | 1 | -3/+10 |
| 2025-12-02 | tsnet: enable node registration via federated identity | Gesa Stupperich | 1 | -0/+2 |
| 2025-12-02 | cleanup: fix typos across multiple files | Naasir | 1 | -1/+1 |
| 2025-12-01 | k8s-operator: Fix typos in egress-pod-readiness.go | Shaikh Naasir | 1 | -2/+2 |
| 2025-11-28 | cmd/k8s-operator fix populateTLSSecret on tests (#18088) | Fernando Serboncini | 1 | -2/+2 |
| 2025-11-28 | cmd/k8s-operator: add support for taiscale.com/http-redirect (#17596) | Fernando Serboncini | 5 | -36/+429 |
| 2025-11-25 | cmd/k8s-operator: allow HA ingresses to be deleted when VIP service does not ... | David Bond | 3 | -26/+71 |
| 2025-11-24 | cmd/cigocacher,go.mod: add cigocacher cmd | Tom Proctor | 1 | -5/+7 |
| 2025-11-20 | cmd/k8s-operator: add multi replica support for recorders (#17864) | David Bond | 7 | -150/+366 |
| 2025-11-20 | cmd/k8s-operator: use stable image for k8s-nameserver (#17985) | David Bond | 2 | -5/+4 |
| 2025-11-19 | cmd/k8s-operator: fix type comparison in apiserver proxy template (#17981) | Raj Singh | 1 | -3/+3 |
| 2025-11-19 | cmd/k8s-operator: default to stable image (#17848) | David Bond | 2 | -3/+3 |
| 2025-11-18 | all: rename variables with lowercase-l/uppercase-I | Alex Chan | 9 | -146/+146 |
| 2025-11-17 | go.mod: bump golang.org/x/crypto (#17907) | Andrew Lytvynov | 1 | -1/+1 |
| 2025-11-16 | ipn/ipnlocal: add PROXY protocol support to Funnel/Serve | Andrew Dunham | 1 | -0/+1 |
| 2025-11-12 | cmd/k8s-operator: remove early return in ingress matching (#17841) | Sachin Iyer | 2 | -1/+37 |
| 2025-11-11 | util/eventbus: log goroutine stacks when hung in CI | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-11-07 | cmd/k8s-operator: support workload identity federation | Tom Proctor | 7 | -34/+272 |
| 2025-11-07 | cmd/k8s-operator: remove Services feature flag detection | Tom Proctor | 3 | -40/+0 |
| 2025-11-04 | wgengine/netlog: include node OS in logged attributes (#17755) | Joe Tsai | 1 | -1/+1 |
| 2025-10-30 | logtail: avoid racing eventbus subscriptions with shutdown (#17695) | M. J. Fromberger | 1 | -0/+1 |
| 2025-10-29 | cmd/k8s-operator/generate: skip tests if no network or Helm is down | Brad Fitzpatrick | 2 | -2/+26 |
| 2025-10-29 | cmd/k8s-operator: rename 'l' variables (#17700) | Fernando Serboncini | 6 | -30/+30 |
| 2025-10-17 | cmd/k8s-operator: allow pod tolerations on nameservers (#17260) | David Bond | 4 | -7/+117 |
| 2025-10-16 | wgengine/netlog: merge connstats into package (#17557) | Joe Tsai | 1 | -3/+2 |
| 2025-10-15 | net/connstats: prepare to remove package (#17554) | Joe Tsai | 1 | -1/+2 |
| 2025-10-08 | go.toolchain.rev: bump Go to 1.25.2 | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-10-08 | cmd/tsrecorder: adds sending api level logging to tsrecorder (#16960) | Tom Meadows | 2 | -6/+28 |
| 2025-10-07 | feature/linkspeed: move cosmetic tstun netlink code out to modular feature | Brad Fitzpatrick | 1 | -2/+1 |