Kristoffer Dalby 
							
						 
					 
					
						
						
							
							
						
						
						
							
						
						
							afc11e1f0c 
							
						 
					 
					
						
						
							
							cmd/hi: fixes and qol ( #2649 )  
						
						
						
					 
					
						2025-06-23 13:43:14 +02:00 
						 
				 
			
				
					
						
							
							
								Kristoffer Dalby 
							
						 
					 
					
						
						
							
							
						
						
						
							
						
						
							a52f1df180 
							
						 
					 
					
						
						
							
							policy: remove v1 code ( #2600 )  
						
						... 
						
						
						
						* policy: remove v1 code
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* db: update test with v1 removal
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* integration: start moving to v2 policy
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* policy: add ssh unmarshal tests
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* changelog: add entry
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* policy: remove v1 comment
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* integration: remove comment out case
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* cleanup skipv1
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* policy: remove v1 prefix workaround
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* policy: add all node ips if prefix/host is ts ip
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
---------
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> 
						
					 
					
						2025-05-20 13:57:26 +02:00 
						 
				 
			
				
					
						
							
							
								Kristoffer Dalby 
							
						 
					 
					
						
						
							
							
						
						
						
							
						
						
							f1206328dc 
							
						 
					 
					
						
						
							
							fix webauth + autoapprove routes  ( #2528 )  
						
						... 
						
						
						
						* types/node: add helper funcs for node tags
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* types/node: add DebugString method for node
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* policy/v2: add String func to AutoApprover interface
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* policy/v2: simplify, use slices.Contains
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* policy/v2: debug, use nodes.DebugString
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* policy/v1: fix potential nil pointer in NodeCanApproveRoute
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* policy/v1: slices.Contains
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* integration/tsic: fix diff in login commands
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* integration: fix webauth running with wrong scenario
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* integration: move common oidc opts to func
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* integration: require node count, more verbose
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* auth: remove uneffective route approve
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* .github/workflows: fmt
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* integration/tsic: add id func
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* integration: remove call that might be nil
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* integration: test autoapprovers against web/authkey x group/tag/user
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* integration: unique network id per scenario
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* Revert "integration: move common oidc opts to func"
This reverts commit 7e9d165d4a 
						
					 
					
						2025-04-30 07:54:04 +02:00 
						 
				 
			
				
					
						
							
							
								Nbelles 
							
						 
					 
					
						
						
						
						
							
						
						
							22277d1fc7 
							
						 
					 
					
						
						
							
							Spell check  
						
						
						
					 
					
						2025-02-05 17:29:30 +01:00 
						 
				 
			
				
					
						
							
							
								Kristoffer Dalby 
							
						 
					 
					
						
						
							
							
						
						
						
							
						
						
							8b92c017ec 
							
						 
					 
					
						
						
							
							add 1.80 to capver and update deps ( #2394 )  
						
						
						
					 
					
						2025-02-05 07:17:51 +01:00 
						 
				 
			
				
					
						
							
							
								Kristoffer Dalby 
							
						 
					 
					
						
						
							
							
						
						
						
							
						
						
							380fcdba17 
							
						 
					 
					
						
						
							
							Add worker reading extra_records_path from file ( #2271 )  
						
						... 
						
						
						
						* consolidate scheduled tasks into one goroutine
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* rename Tailcfg dns struct
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* add dns.extra_records_path option
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* prettier lint
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
* go-fmt
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
---------
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> 
						
					 
					
						2024-12-13 07:52:40 +00:00 
						 
				 
			
				
					
						
							
							
								enoperm 
							
						 
					 
					
						
						
							
							
						
						
						
							
						
						
							1e61084898 
							
						 
					 
					
						
						
							
							Add compatibility with only websocket-capable clients ( #2132 )  
						
						... 
						
						
						
						* handle control protocol through websocket
The necessary behaviour is already in place,
but the wasm build only issued GETs, and the handler was not invoked.
* get DERP-over-websocket working for wasm clients
* Prepare for testing builtin websocket-over-DERP
Still needs some way to assert that clients are connected through websockets,
rather than the TCP hijacking version of DERP.
* integration tests: properly differentiate between DERP transports
* do not touch unrelated code
* linter fixes
* integration testing: unexport common implementation of derp server scenario
* fixup! integration testing: unexport common implementation of derp server scenario
* dockertestutil/logs: remove unhelpful comment
* update changelog
---------
Co-authored-by: Csaba Sarkadi <sarkadicsa@tutanota.de> 
						
					 
					
						2024-09-21 12:05:36 +02:00 
						 
				 
			
				
					
						
							
							
								Stefan Majer 
							
						 
					 
					
						
						
							
							
						
						
						
							
						
						
							8185a70dc7 
							
						 
					 
					
						
						
							
							Fix typos ( #1860 )  
						
						... 
						
						
						
						* Fix typos
* trigger GitHub actions
* remove kdiff3 orig files
* fix unicode
* remove unnecessary function call
* remove unnecessary comment
* remove unnecessary comment
---------
Co-authored-by: ohdearaugustin <ohdearaugustin@users.noreply.github.com> 
						
					 
					
						2024-05-19 23:49:27 +02:00 
						 
				 
			
				
					
						
							
							
								Kristoffer Dalby 
							
						 
					 
					
						
						
						
						
							
						
						
							58c94d2bd3 
							
						 
					 
					
						
						
							
							Rework map session  
						
						... 
						
						
						
						This commit restructures the map session in to a struct
holding the state of what is needed during its lifetime.
For streaming sessions, the event loop is structured a
bit differently not hammering the clients with updates
but rather batching them over a short, configurable time
which should significantly improve cpu usage, and potentially
flakyness.
The use of Patch updates has been dialed back a little as
it does not look like its a 100% ready for prime time. Nodes
are now updated with full changes, except for a few things
like online status.
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> 
						
					 
					
						2024-04-15 12:31:53 +02:00 
						 
				 
			
				
					
						
							
							
								Kristoffer Dalby 
							
						 
					 
					
						
						
							
							
						
						
						
							
						
						
							5dbd59ca55 
							
						 
					 
					
						
						
							
							Get integration test netmap from watch-ipn command ( #1729 )  
						
						
						
					 
					
						2024-02-18 23:22:18 +01:00 
						 
				 
			
				
					
						
							
							
								Kristoffer Dalby 
							
						 
					 
					
						
						
							
							
						
						
						
							
						
						
							384ca03208 
							
						 
					 
					
						
						
							
							new IP allocator and add postgres to integration tests. ( #1756 )  
						
						
						
					 
					
						2024-02-18 19:31:29 +01:00 
						 
				 
			
				
					
						
							
							
								Kristoffer Dalby 
							
						 
					 
					
						
						
							
							
						
						
						
							
						
						
							00e7550e76 
							
						 
					 
					
						
						
							
							Add assert func for verifying status, netmap and netcheck ( #1723 )  
						
						
						
					 
					
						2024-02-09 07:26:41 +01:00 
						 
				 
			
				
					
						
							
							
								Kristoffer Dalby 
							
						 
					 
					
						
						
							
							
						
						
						
							
						
						
							f65f4eca35 
							
						 
					 
					
						
						
							
							ensure online status and route changes are propagated ( #1564 )  
						
						
						
					 
					
						2023-12-09 18:09:24 +01:00 
						 
				 
			
				
					
						
							
							
								Kristoffer Dalby 
							
						 
					 
					
						
						
						
						
							
						
						
							2434d76ade 
							
						 
					 
					
						
						
							
							give ci more tollerance for timeouts  
						
						... 
						
						
						
						Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> 
						
					 
					
						2023-09-19 10:20:21 -05:00 
						 
				 
			
				
					
						
							
							
								Kristoffer Dalby 
							
						 
					 
					
						
						
						
						
							
						
						
							1766e6b5df 
							
						 
					 
					
						
						
							
							General fixups discovered by checking errors  
						
						... 
						
						
						
						There was a lot of tests that actually threw a lot of errors and that did
not pass all the way because we didnt check everything. This commit should
fix all of these cases.
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> 
						
					 
					
						2023-09-05 08:47:43 +02:00 
						 
				 
			
				
					
						
							
							
								Kristoffer Dalby 
							
						 
					 
					
						
						
						
						
							
						
						
							b4a4d0f760 
							
						 
					 
					
						
						
							
							Handle errors in integration test setups  
						
						... 
						
						
						
						Thanks @kev-the-dev
Closes  #1460 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> 
						
					 
					
						2023-09-05 08:47:43 +02:00 
						 
				 
			
				
					
						
							
							
								Juan Font 
							
						 
					 
					
						
						
						
						
							
						
						
							96f9680afd 
							
						 
					 
					
						
						
							
							Reuse Ping function for DERP ping  
						
						
						
					 
					
						2023-04-24 12:17:24 +02:00 
						 
				 
			
				
					
						
							
							
								Juan Font 
							
						 
					 
					
						
						
						
						
							
						
						
							eacd687dbf 
							
						 
					 
					
						
						
							
							Added DERP integration tests  
						
						... 
						
						
						
						Linting fixes
Set listen addr to :8443 
						
					 
					
						2023-04-24 12:17:24 +02:00 
						 
				 
			
				
					
						
							
							
								Juan Font 
							
						 
					 
					
						
						
						
						
							
						
						
							bb07aec82c 
							
						 
					 
					
						
						
							
							Expand tsic to offer PingViaDerp  
						
						
						
					 
					
						2023-04-24 12:17:24 +02:00 
						 
				 
			
				
					
						
							
							
								Kristoffer Dalby 
							
						 
					 
					
						
						
							
							
						
						
						
							
						
						
							5e74ca9414 
							
						 
					 
					
						
						
							
							Fix IPv6 in ACLs ( #1339 )  
						
						
						
					 
					
						2023-04-16 12:26:35 +02:00 
						 
				 
			
				
					
						
							
							
								Kristoffer Dalby 
							
						 
					 
					
						
						
						
						
							
						
						
							c39085911f 
							
						 
					 
					
						
						
							
							Add node expiry test  
						
						... 
						
						
						
						This commits adds a test to verify that nodes get updated if a node in
their network expires.
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> 
						
					 
					
						2023-02-03 09:26:22 +01:00