| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-07-23 | cmd/tailscale/cli: use DNS name instead of Location to hide Mullvad exit node... | Nick Khyl | 1 | -3/+4 |
| 2025-07-22 | cmd/tailscale/cli: add advertise command to advertise a node as service proxy... | KevinLiang10 | 2 | -11/+36 |
| 2025-07-22 | cmd/tailscale/cli: revert key for web config for services to FQDN (#16627) | KevinLiang10 | 5 | -39/+43 |
| 2025-07-22 | cmd/{k8s-proxy,containerboot,k8s-operator},kube: add health check and metrics... | David Bond | 6 | -149/+80 |
| 2025-07-22 | cmd/{k8s-operator,k8s-proxy},kube: use consistent type for auth mode config (... | Tom Proctor | 5 | -37/+24 |
| 2025-07-22 | cmd/tailscale/cli: make configure kubeconfig accept Tailscale Services (#16601) | Tom Proctor | 2 | -13/+194 |
| 2025-07-21 | cmd/k8s-operator: Allow specifying cluster ips for nameservers (#16477) | David Bond | 4 | -71/+129 |
| 2025-07-21 | all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572) | Tom Proctor | 24 | -658/+2112 |
| 2025-07-18 | cmd/tailscale/cli: remove advertise command (#16592) | KevinLiang10 | 3 | -78/+1 |
| 2025-07-18 | cmd/tailscale/cli: Add clear subcommand for serve services (#16509) | KevinLiang10 | 1 | -1/+35 |
| 2025-07-18 | Kevin/add drain sub command for serve services (#16502) | KevinLiang10 | 2 | -0/+96 |
| 2025-07-18 | client/local,cmd/tailscale/cli,ipn/localapi: expose eventbus graph (#16597) | Claus Lensbøl | 1 | -0/+56 |
| 2025-07-16 | cmd/tailscale/cli: Add service flag to serve command (#16191) | KevinLiang10 | 5 | -103/+1277 |
| 2025-07-16 | cmd/tailscale/cli,ipn/ipnlocal,wgengine/magicsock: implement tailscale debug ... | Jordan Whited | 1 | -0/+20 |
| 2025-07-14 | cmd/{k8s-operator,k8s-proxy},kube/k8s-proxy: add static endpoints for kube-ap... | Tom Meadows | 3 | -36/+66 |
| 2025-07-13 | types/lazy: add lazy.GMap: a map of lazily computed GValues (#16532) | Simon Law | 1 | -1/+1 |
| 2025-07-11 | cmd/tsidp: set hostinfo.App in tsnet mode (#16544) | Andrew Lytvynov | 1 | -0/+2 |
| 2025-07-11 | cmd/tailscale/cli: add "configure jetkvm" subcommand | Brad Fitzpatrick | 2 | -0/+84 |
| 2025-07-10 | cmd/tailscale, ipn/ipnstate, wgengine/magicsock: update ping output for peer ... | Dylan Bargatze | 1 | -1/+3 |
| 2025-07-10 | all: detect JetKVM and specialize a handful of things for it | Brad Fitzpatrick | 1 | -8/+7 |
| 2025-07-10 | cmd/{k8s-operator,k8s-proxy}: apply accept-routes configuration to k8s-proxy ... | David Bond | 2 | -4/+19 |
| 2025-07-10 | cmd/{k8s-operator,k8s-proxy}: allow setting login server url (#16504) | David Bond | 2 | -0/+10 |
| 2025-07-10 | cmd/k8s-operator: allow letsencrypt staging on k8s proxies (#16521) | David Bond | 2 | -8/+20 |
| 2025-07-09 | cmd/tailscale/cli,ipn/ipnstate,wgengine/magicsock: label peer-relay (#16510) | Jordan Whited | 1 | -1/+3 |
| 2025-07-09 | cmd/tailscale/cli: add support for tailscale {up,set} --exit-node=auto:any | Nick Khyl | 3 | -6/+34 |
| 2025-07-09 | cmd/k8s-operator: don't require generation for Available condition (#16497) | Tom Proctor | 1 | -6/+24 |
| 2025-07-09 | cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) | Tom Proctor | 18 | -160/+1070 |
| 2025-07-09 | cmd/k8s-operator/deploy: clarify helm install notes (#16449) | Tom Proctor | 1 | -1/+3 |
| 2025-07-08 | cmd/tailscale: format empty cities and countries as hyphens (#16495) | Simon Law | 2 | -21/+29 |
| 2025-07-08 | cmd/tailscale/cli,ipn/ipnlocal: restrict logout when AlwaysOn mode is enabled | Nick Khyl | 2 | -1/+14 |
| 2025-07-07 | cmd/k8s-operator: Allow custom ingress class names (#16472) | David Bond | 10 | -52/+83 |
| 2025-07-07 | cmd/k8s-operator: always set ProxyGroup status conditions (#16429) | Tom Proctor | 4 | -170/+206 |
| 2025-07-04 | cmd/k8s-operator: Move login server value to top-level (#16470) | David Bond | 2 | -4/+4 |
| 2025-07-03 | cmd/tailscale/cli,ipn,ipn/ipnlocal: add AutoExitNode preference for automatic... | Nick Khyl | 1 | -0/+4 |
| 2025-07-03 | cmd/k8s-operator: Set login server on tsrecorder nodes (#16443) | David Bond | 5 | -11/+24 |
| 2025-07-02 | cmd/k8s-operator: Allow configuration of login server (#16432) | David Bond | 10 | -10/+50 |
| 2025-06-30 | cmd/k8s-operator: ProxyClass annotation for Services and Ingresses (#16363) | Tom Meadows | 6 | -28/+398 |
| 2025-06-27 | tsidp: update README to refer to community projects (#16411) | Simon Law | 1 | -2/+2 |
| 2025-06-27 | ipn/store: make StateStore.All optional (#16409) | Andrew Lytvynov | 3 | -28/+0 |
| 2025-06-27 | cmd/{containerboot,k8s-operator}: use state Secret for checking device auth (... | Tom Proctor | 16 | -188/+349 |
| 2025-06-27 | cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115) | Tom Meadows | 12 | -63/+1972 |
| 2025-06-27 | cmd/tailscale: use text format for TKA head | Kristoffer Dalby | 1 | -1/+5 |
| 2025-06-27 | cmd/tailscale: add tlpub: prefix to lock log output | Kristoffer Dalby | 1 | -3/+3 |
| 2025-06-26 | ipn/store: automatically migrate between plaintext and encrypted state (#16318) | Andrew Lytvynov | 4 | -4/+73 |
| 2025-06-25 | cmd/k8s-operator: Add NOTES.txt to Helm chart (#16364) | David Bond | 1 | -0/+25 |
| 2025-06-23 | cmd/tailscale: warn user about nllock key removal without resigning | Kristoffer Dalby | 1 | -0/+14 |
| 2025-06-23 | util/prompt: make yes/no prompt reusable | Kristoffer Dalby | 3 | -17/+5 |
| 2025-06-20 | .github/workflows: shard the Windows builder | Brad Fitzpatrick | 1 | -0/+10 |
| 2025-06-20 | cmd/k8s-operator: remove conffile hashing mechanism (#16335)annotations | Irbe Krumina | 7 | -238/+74 |
| 2025-06-18 | net/tlsdial: fix TLS cert validation of HTTPS proxies | Brad Fitzpatrick | 1 | -0/+81 |