Kristoffer Dalby 2024219bd1 types: Distinguish subnet and exit node access ... When we fixed the issue of node visibility of nodes that only had access to eachother because of a subnet route, we gave all nodes access to all exit routes by accident. This commit splits exit nodes and subnet routes in the access. If a matcher indicates that the node should have access to any part of the subnet routes, we do not remove it from the node list. If a matcher destination is equal to the internet, and the target node is an exit node, we also do not remove the access. Fixes #2784 Fixes #2788 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>		2025-11-02 13:19:59 +01:00
..
assets	update flake, fix prettier lint	2023-09-05 08:47:43 +02:00
capver	policy: fix autogroup:self propagation and optimize cache invalidation (#2807)	2025-10-23 17:57:41 +02:00
db	state: use AllApprovedRoutes instead of SubnetRoutes	2025-11-02 13:19:59 +01:00
derp	Fix flaky TestShuffleDERPMapDeterministic by ensuring deterministic map iteration (#2848)	2025-11-02 10:05:23 +01:00
dns	integration: replace time.Sleep with assert.EventuallyWithT (#2680)	2025-07-10 23:38:55 +02:00
mapper	state: use AllApprovedRoutes instead of SubnetRoutes	2025-11-02 13:19:59 +01:00
policy	matcher: Add func for comparing Dests and TheInternet	2025-11-02 13:19:59 +01:00
routes	debug: add json and improve	2025-09-09 09:40:00 +02:00
state	state: use AllApprovedRoutes instead of SubnetRoutes	2025-11-02 13:19:59 +01:00
templates	integration: replace time.Sleep with assert.EventuallyWithT (#2680)	2025-07-10 23:38:55 +02:00
types	types: Distinguish subnet and exit node access	2025-11-02 13:19:59 +01:00
util	stricter hostname validation and replace (#2383)	2025-10-22 13:50:39 +02:00
app.go	hscontrol: add /version HTTP endpoint (#2821)	2025-10-27 10:41:34 +01:00
auth_test.go	stability and race conditions in auth and node store (#2781)	2025-10-16 12:17:43 +02:00
auth.go	stricter hostname validation and replace (#2383)	2025-10-22 13:50:39 +02:00
debug.go	lint and leftover	2025-09-09 09:40:00 +02:00
grpcv1_test.go	rename package name to hscontrol	2023-05-10 20:47:51 +02:00
grpcv1.go	expire nodes with a custom timestamp (#2828)	2025-11-01 08:09:13 +01:00
handlers.go	hscontrol: add /version HTTP endpoint (#2821)	2025-10-27 10:41:34 +01:00
metrics.go	integration: replace time.Sleep with assert.EventuallyWithT (#2680)	2025-07-10 23:38:55 +02:00
noise.go	lint and leftover	2025-09-09 09:40:00 +02:00
oidc.go	fix: return valid AuthUrl in followup request on expired reg id	2025-10-11 05:57:39 +02:00
platform_config.go	Return better web errors to the user (#2398)	2025-02-01 15:25:18 +01:00
poll.go	stability and race conditions in auth and node store (#2781)	2025-10-16 12:17:43 +02:00
suite_test.go	Redo OIDC configuration (#2020)	2024-10-02 14:50:17 +02:00
tailsql.go	integration: replace time.Sleep with assert.EventuallyWithT (#2680)	2025-07-10 23:38:55 +02:00