summaryrefslogtreecommitdiffhomepage
path: root/cmd
AgeCommit message (Expand)AuthorFilesLines
2025-07-28cmd/k8s-operator,k8s-operator: allow setting a `priorityClassName`k8s_priority_classLee Briggs4-0/+17
2025-07-03cmd/k8s-operator: Set login server on tsrecorder nodes (#16443)David Bond5-11/+24
2025-07-02cmd/k8s-operator: Allow configuration of login server (#16432)David Bond10-10/+50
2025-06-30cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363)Tom Meadows6-28/+398
2025-06-27tsidp: update README to refer to community projects (#16411)Simon Law1-2/+2
2025-06-27ipn/store: make StateStore.All optional (#16409)Andrew Lytvynov3-28/+0
2025-06-27cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (...Tom Proctor16-188/+349
2025-06-27cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)Tom Meadows12-63/+1972
2025-06-27cmd/tailscale: use text format for TKA headKristoffer Dalby1-1/+5
2025-06-27cmd/tailscale: add tlpub: prefix to lock log outputKristoffer Dalby1-3/+3
2025-06-26ipn/store: automatically migrate between plaintext and encrypted state (#16318)Andrew Lytvynov4-4/+73
2025-06-25cmd/k8s-operator: Add NOTES.txt to Helm chart (#16364)David Bond1-0/+25
2025-06-23cmd/tailscale: warn user about nllock key removal without resigningKristoffer Dalby1-0/+14
2025-06-23util/prompt: make yes/no prompt reusableKristoffer Dalby3-17/+5
2025-06-20.github/workflows: shard the Windows builderBrad Fitzpatrick1-0/+10
2025-06-20cmd/k8s-operator: remove conffile hashing mechanism (#16335)annotationsIrbe Krumina7-238/+74
2025-06-18net/tlsdial: fix TLS cert validation of HTTPS proxiesBrad Fitzpatrick1-0/+81
2025-06-18feature/tpm: implement ipn.StateStore using TPM sealing (#16030)Andrew Lytvynov1-1/+1
2025-06-18cmd/tsidp: fix OIDC client persistence across restartsRaj Singh2-9/+148
2025-06-17cmd/tailscale: clean up dns --help messages (#16306)Simon Law3-63/+98
2025-06-17derp/derphttp: add error notify for RunWatchConnectionLoop (#16261)Mike O'Driscoll1-1/+2
2025-06-16scripts/check_license_headers.sh: delete, rewrite as a Go testBrad Fitzpatrick4-0/+4
2025-06-16cmd/natc: add a flag to use specific DNS serversJames Tucker2-2/+225
2025-06-16tka: reject removal of the last signing keyAnton Tolchanov1-0/+3
2025-06-16cmd/k8s-operator: ensure that TLS resources are updated for HA Ingress (#16262)Irbe Krumina3-154/+183
2025-06-13client/local: use an iterator to stream bus events (#16269)M. J. Fromberger2-10/+3
2025-06-13net/netcheck: preserve live home DERP through packet lossJames Tucker1-1/+1
2025-06-12cmd/k8s-operator: ensure status update errors are displayed to users (#16251)Irbe Krumina4-23/+24
2025-06-11ipn/localapi,client/local: add debug watcher for bus events (#16239)Claus Lensbøl2-0/+25
2025-06-11cmd/natc: allow specifying the tsnet state dirFran Bull2-33/+34
2025-06-10cmd/{derp,derpprobe},prober,derp: add mesh support to derpprobe (#15414)Mike O'Driscoll3-2/+71
2025-06-10cmd/tailscale/cli: add a risk message about rp_filterAnton Tolchanov5-3/+28
2025-06-09cmd/k8s-operator: explicitly set tcp on VIPService port configuration for Ing...Tom Meadows2-9/+9
2025-06-05cmd/natc: use new on disk state store for consensusFran Bull2-2/+34
2025-06-04cmd/natc: add optional consensus backendFran Bull7-10/+1029
2025-06-03cmd/tsidp: add Docker image building support (#16078)Raj Singh3-71/+682
2025-05-30cmd/containerboot: allow setting --accept-dns via TS_EXTRA_ARGS again (#16129)Irbe Krumina3-91/+322
2025-05-29go.mod: bump golang.org/x depsBrad Fitzpatrick2-2/+4
2025-05-29net/tshttpproxy: fix WDAP/PAC proxy detection on Win10 1607 and earlierNick Khyl1-1/+1
2025-05-24cmd/tsidp: add web UI for managing OIDC clients (#16068)Raj Singh6-7/+1097
2025-05-24cmd/tsidp: Fix sending string for refresh_tokenTim Klocke1-1/+1
2025-05-23cmd/k8s-operator: validate Service tags, catch duplicate Tailscale Services (...Irbe Krumina6-25/+122
2025-05-22client/web: add Sec-Fetch-Site CSRF protection (#16046)Patrick O'Doherty4-18/+14
2025-05-22cmd/derper: fix mesh auth for DERP servers (#16061)Simon Law2-56/+1
2025-05-20cmd/k8s-operator: fix Tailscale Service API errors check (#16020)Irbe Krumina3-11/+5
2025-05-19cmd/tailscale/cli: suggest using "tailscale set", not "up", to set operatorBrad Fitzpatrick1-1/+1
2025-05-19cmd/derper, net/tlsdial: fix client's self-signed cert validationBrad Fitzpatrick5-0/+5
2025-05-19cmd/k8s-operator: rename VIPService -> Tailscale Service in L3 HA Service Rec...Tom Meadows3-137/+137
2025-05-19cmd/k8s-operator: warn if HA Service is applied, but VIPService feature flag ...Tom Meadows1-0/+10
2025-05-19cmd/k8s-operator,kube/kubetypes,k8s-operator/apis: reconcile L3 HA Services (...Tom Meadows11-21/+1427