| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2026-02-02 | cmd/k8s-proxy,kube/k8s-proxy: starting userspace proxychaosinthecrd/userspace-tsnet-proxy | chaosinthecrd | 2 | -30/+330 |
| 2026-01-21 | cmd/k8s-operator,k8s-operator: Allow the use of multiple tailnets (#18344) | David Bond | 17 | -64/+548 |
| 2026-01-19 | net/udprelay: advertise addresses from cloud metadata service (#18368) | Alex Valiushko | 1 | -1/+1 |
| 2026-01-16 | net/netmon: move TailscaleInterfaceIndex out of netmon.State (#18428) | Jonathan Nobels | 1 | -1/+2 |
| 2026-01-16 | k8s-operator,kube: allowing k8s api request events to be enabled via grants (... | Tom Meadows | 1 | -0/+2 |
| 2026-01-14 | cmd/containerboot: allow for automatic ID token generation | Mario Minardi | 4 | -8/+79 |
| 2026-01-14 | cmd,feature: add identity token auto generation for workload identity (#18373) | Danni Popova | 6 | -3/+223 |
| 2026-01-13 | metrics: add a NewLabelMap helper to create and register label maps | Anton Tolchanov | 1 | -7/+2 |
| 2026-01-09 | go.mod: bump github.com/containerd/containerd@v1.7.29 (#18374) | Patrick O'Doherty | 1 | -4/+4 |
| 2026-01-08 | cmd,internal,feature: add workload idenity support to gitops pusher | Mario Minardi | 1 | -38/+73 |
| 2026-01-08 | feature/featuretags: make QR codes modular (#18358) | Simon Law | 3 | -17/+34 |
| 2026-01-08 | net/portmapper, go.mod: unfork our goupnp dependency | Andrew Dunham | 4 | -27/+27 |
| 2026-01-08 | cmd/k8s-operator/e2e,go.mod: remove client v2 dependency | Tom Proctor | 1 | -31/+50 |
| 2026-01-08 | cmd/k8s-operator/e2e: run self-contained e2e tests with devcontrol (#17415) | Tom Proctor | 13 | -197/+1350 |
| 2026-01-07 | cmd/tailscale/cli, util/qrcodes: format QR codes on Linux consoles (#18182) | Simon Law | 3 | -20/+10 |
| 2026-01-07 | cmd/containerboot: add OAuth and WIF auth support (#18311) | Raj Singh | 4 | -10/+131 |
| 2026-01-07 | cmd/distsign: add CLI for verifying package signatures (#18239) | Andrew Lytvynov | 1 | -0/+42 |
| 2026-01-07 | ipn,cmd/tailscale/cli: set correct SNI name for TLS-terminated TCP Services (... | Naman Sood | 2 | -6/+19 |
| 2026-01-06 | wgengine/magicsock: extract IMDS utilities into a standalone package (#18334) | Alex Valiushko | 5 | -0/+5 |
| 2026-01-06 | cmd/tailscale/cli: remove Services-specific subcommands from funnel (#18225) | Harry Harpham | 1 | -74/+81 |
| 2026-01-06 | cmd/tailscaled,ipn/{ipnlocal,store/kubestore}: don't create attestation keys ... | Irbe Krumina | 2 | -4/+98 |
| 2026-01-05 | cmd/tailscaled: disable state encryption / attestation by default (#18336) | Andrew Lytvynov | 1 | -14/+4 |
| 2025-12-25 | cmd/derper: add --acme-email flag for GCP cert mode (#18278) | Raj Singh | 3 | -7/+21 |
| 2025-12-22 | cmd/tailscale/cli: document why there's no --force-reauth on login | Alex Chan | 1 | -0/+3 |
| 2025-12-19 | cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extensi... | Irbe Krumina | 3 | -0/+26 |
| 2025-12-18 | cmd/containerboot: support egress to Tailscale Service FQDNs (#17493) | Tom Proctor | 4 | -57/+125 |
| 2025-12-17 | cmd/k8s-operator: fixes helm template for oauth secret volume mount (#18230) | Tom Meadows | 2 | -23/+27 |
| 2025-12-17 | net/netmon, wgengine/userspace: purge ChangeDelta.Major and address TODOs (#1... | Jonathan Nobels | 1 | -3/+3 |
| 2025-12-16 | client/local: add method to set gauge metric to a value | Will Norris | 1 | -1/+1 |
| 2025-12-15 | .github,cmd/cigocacher: add flags --version --stats --cigocached-hostcmd/cigocacher/d0d993f5d6576b5d97d0242c64bbe2de049d6486 | Tom Proctor | 2 | -26/+81 |
| 2025-12-15 | cmd/k8s-operator: fix statefulset template yaml indentation (#18194) | Tom Meadows | 5 | -21/+62 |
| 2025-12-10 | cmd/derper: add GCP Certificate Manager support (#18161) | Raj Singh | 4 | -8/+76 |
| 2025-12-09 | net/dns: retrample resolve.conf when another process has trampled it (#18069) | Claus Lensbøl | 1 | -2/+2 |
| 2025-12-09 | appc,feature: add the start of new conn25 app connector | Fran Bull | 3 | -5/+8 |
| 2025-12-09 | cmd/tailscale/cli: stabilise the output of `tailscale lock status --json` | Alex Chan | 4 | -21/+439 |
| 2025-12-08 | cmd/k8s-operator: warn if users attempt to expose a headless Service (#18140) | Irbe Krumina | 2 | -86/+88 |
| 2025-12-08 | cmd/k8s-operator: don't log errors on not found objects. (#18142) | Irbe Krumina | 1 | -3/+10 |
| 2025-12-04 | cmd/tailscale,ipn: add Unix socket support for serve | Peter A. | 3 | -1/+93 |
| 2025-12-03 | go.mod: bump the version of setec | Alex Chan | 1 | -1/+1 |
| 2025-12-02 | tsnet: enable node registration via federated identity | Gesa Stupperich | 2 | -1/+5 |
| 2025-12-02 | cmd/netlogfmt: allow empty --resolve-addrs flag (#18103) | Joe Tsai | 1 | -0/+1 |
| 2025-12-02 | cleanup: fix typos across multiple files | Naasir | 4 | -4/+4 |
| 2025-12-02 | .github,cmd/cigocacher: use cigocacher for windows | Tom Proctor | 4 | -24/+261 |
| 2025-12-01 | k8s-operator: Fix typos in egress-pod-readiness.go | Shaikh Naasir | 1 | -2/+2 |
| 2025-12-01 | cmd/tailscale/cli: soften the warning on `--force-reauth` for seamless | Alex Chan | 1 | -1/+1 |
| 2025-11-28 | cmd/k8s-operator fix populateTLSSecret on tests (#18088) | Fernando Serboncini | 1 | -2/+2 |
| 2025-11-28 | cmd/k8s-operator: add support for taiscale.com/http-redirect (#17596) | Fernando Serboncini | 5 | -36/+429 |
| 2025-11-26 | derp/derpserver: add a unique sender cardinality estimate | James Tucker | 1 | -0/+2 |
| 2025-11-25 | cmd/tailscale/cli,ipn,all: make peer relay server port a *uint16 | Jordan Whited | 1 | -1/+1 |
| 2025-11-25 | tailcfg, control/controlclient: start moving MapResponse.DefaultAutoUpdate to... | Brad Fitzpatrick | 1 | -1/+1 |
