| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2025-09-03 | cmd/k8s-operator: update connector example (#17020) | David Bond | 1 | -1/+2 |
| 2025-09-02 | util/syspolicy: finish plumbing policyclient, add feature/syspolicy, move glo... | Brad Fitzpatrick | 1 | -1/+2 |
| 2025-09-02 | util/syspolicy/{setting,ptype}: move PreferenceOption and Visibility to new l... | Brad Fitzpatrick | 1 | -0/+1 |
| 2025-09-02 | cmd/k8s-operator: allow specifying replicas for connectors (#16721) | David Bond | 10 | -193/+566 |
| 2025-09-01 | util/syspolicy/policyclient: add policyclient.Client interface, start plumbing | Brad Fitzpatrick | 1 | -1/+2 |
| 2025-08-31 | util/syspolicy/*: move syspolicy keys to new const leaf "pkey" package | Brad Fitzpatrick | 1 | -0/+1 |
| 2025-08-28 | wgengine/magicsock: shorten process internal DERP queue | James Tucker | 1 | -1/+0 |
| 2025-08-28 | util/ringbuffer: rename to ringlog | James Tucker | 1 | -1/+1 |
| 2025-08-26 | go.toolchain.branch: bump to go1.25 (#16954) | Patrick O'Doherty | 1 | -2/+13 |
| 2025-08-21 | wgengine/magicsock,net/sockopts: export Windows ICMP suppression logic (#16917) | Jordan Whited | 1 | -1/+1 |
| 2025-08-20 | net/sockopts,wgengine/magicsock: export socket buffer sizing logic (#16909) | Jordan Whited | 1 | -0/+1 |
| 2025-08-13 | net/{batching,packet},wgengine/magicsock: export batchingConn (#16848) | Jordan Whited | 1 | -0/+1 |
| 2025-08-05 | .github/workflows: enforce github action version pinning (#16768) | Andrew Lytvynov | 1 | -1/+4 |
| 2025-07-31 | cmd/k8s-operator,k8s-operator: allow setting a `priorityClassName` (#16685) | Lee Briggs | 4 | -0/+16 |
| 2025-07-25 | cmd/k8s-operator: Enhance DNS record handling for ProxyGroup egress services ... | Raj Singh | 2 | -98/+310 |
| 2025-07-22 | cmd/{k8s-proxy,containerboot,k8s-operator},kube: add health check and metrics... | David Bond | 2 | -1/+9 |
| 2025-07-22 | cmd/{k8s-operator,k8s-proxy},kube: use consistent type for auth mode config (... | Tom Proctor | 4 | -33/+19 |
| 2025-07-21 | cmd/k8s-operator: Allow specifying cluster ips for nameservers (#16477) | David Bond | 4 | -71/+129 |
| 2025-07-21 | all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572) | Tom Proctor | 16 | -164/+1368 |
| 2025-07-14 | cmd/{k8s-operator,k8s-proxy},kube/k8s-proxy: add static endpoints for kube-ap... | Tom Meadows | 2 | -36/+51 |
| 2025-07-10 | cmd/{k8s-operator,k8s-proxy}: apply accept-routes configuration to k8s-proxy ... | David Bond | 1 | -0/+4 |
| 2025-07-10 | cmd/{k8s-operator,k8s-proxy}: allow setting login server url (#16504) | David Bond | 1 | -0/+5 |
| 2025-07-10 | cmd/k8s-operator: allow letsencrypt staging on k8s proxies (#16521) | David Bond | 2 | -8/+20 |
| 2025-07-09 | cmd/k8s-operator: don't require generation for Available condition (#16497) | Tom Proctor | 1 | -6/+24 |
| 2025-07-09 | cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) | Tom Proctor | 17 | -160/+873 |
| 2025-07-09 | cmd/k8s-operator/deploy: clarify helm install notes (#16449) | Tom Proctor | 1 | -1/+3 |
| 2025-07-07 | cmd/k8s-operator: Allow custom ingress class names (#16472) | David Bond | 10 | -52/+83 |
| 2025-07-07 | cmd/k8s-operator: always set ProxyGroup status conditions (#16429) | Tom Proctor | 4 | -170/+206 |
| 2025-07-04 | cmd/k8s-operator: Move login server value to top-level (#16470) | David Bond | 2 | -4/+4 |
| 2025-07-03 | cmd/k8s-operator: Set login server on tsrecorder nodes (#16443) | David Bond | 5 | -11/+24 |
| 2025-07-02 | cmd/k8s-operator: Allow configuration of login server (#16432) | David Bond | 10 | -10/+50 |
| 2025-06-30 | cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363) | Tom Meadows | 6 | -28/+398 |
| 2025-06-27 | cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (... | Tom Proctor | 12 | -104/+160 |
| 2025-06-27 | cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) | Tom Meadows | 12 | -63/+1972 |
| 2025-06-25 | cmd/k8s-operator: Add NOTES.txt to Helm chart (#16364) | David Bond | 1 | -0/+25 |
| 2025-06-20 | cmd/k8s-operator: remove conffile hashing mechanism (#16335)annotations | Irbe Krumina | 7 | -238/+74 |
| 2025-06-16 | cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262) | Irbe Krumina | 3 | -154/+183 |
| 2025-06-12 | cmd/k8s-operator: ensure status update errors are displayed to users (#16251) | Irbe Krumina | 4 | -23/+24 |
| 2025-06-10 | cmd/tailscale/cli: add a risk message about rp_filter | Anton Tolchanov | 1 | -1/+1 |
| 2025-06-09 | cmd/k8s-operator: explicitly set tcp on VIPService port configuration for Ing... | Tom Meadows | 2 | -9/+9 |
| 2025-05-29 | go.mod: bump golang.org/x deps | Brad Fitzpatrick | 1 | -1/+2 |
| 2025-05-23 | cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (... | Irbe Krumina | 6 | -25/+122 |
| 2025-05-22 | client/web: add Sec-Fetch-Site CSRF protection (#16046) | Patrick O'Doherty | 1 | -6/+3 |
| 2025-05-20 | cmd/k8s-operator: fix Tailscale Service API errors check (#16020) | Irbe Krumina | 3 | -11/+5 |
| 2025-05-19 | cmd/derper, net/tlsdial: fix client's self-signed cert validation | Brad Fitzpatrick | 1 | -0/+1 |
| 2025-05-19 | cmd/k8s-operator: rename VIPService -> Tailscale Service in L3 HA Service Rec... | Tom Meadows | 3 | -137/+137 |
| 2025-05-19 | cmd/k8s-operator: warn if HA Service is applied, but VIPService feature flag ... | Tom Meadows | 1 | -0/+10 |
| 2025-05-19 | cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (... | Tom Meadows | 11 | -21/+1427 |
| 2025-05-19 | {cmd,}/k8s-operator: support IRSA for Recorder resources (#15913) | Tom Proctor | 6 | -25/+288 |
| 2025-05-14 | cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet withou... | Irbe Krumina | 3 | -145/+191 |
