headscale

rsp2k/headscale

Fork 0

Commit graph

da2878e8fb docs/oidc: warn about Authentik's built-in groups scope duplicating claims feature/oidc-groups Ryan Malloy 2026-06-06 10:31:23 -06:00
eefc99e807 Remove temporary debug logging Ryan Malloy 2026-06-06 10:14:33 -06:00
af6d7a8a0b debug: log claims.Groups at id_token and userinfo merge points Ryan Malloy 2026-06-06 10:07:52 -06:00
d5e2aa97da debug: log SetGroups input in FromClaim (temporary) Ryan Malloy 2026-06-06 09:18:43 -06:00
209ba5c4ea oidc groups: store and expose the OIDC groups claim Ryan Malloy 2026-06-04 01:57:50 -06:00
5228cb1a40 change: drop subnet-router full update, use policy change Kristoffer Dalby 2026-06-03 13:55:42 +00:00
cffdb77c8b mapper, change: coalesce duplicate policy recomputes per tick Kristoffer Dalby 2026-06-03 13:21:59 +00:00
7706552c99 state: gate reconnect PolicyChange on NodeNeedsPeerRecompute Kristoffer Dalby 2026-06-03 10:25:52 +00:00
bceac495f9 policy: add NodeNeedsPeerRecompute predicate Kristoffer Dalby 2026-06-03 10:25:20 +00:00
171fd7a3c5 policy: key autogroup:self invalidation on UserID not User view Kristoffer Dalby 2026-05-29 10:06:02 +00:00
ea8fc72570 db: backfill zero-time node expiry to NULL Shourya Gautam 2026-05-22 21:56:30 +05:30
77ba225cdb db: treat Go module pseudo-versions as dev builds Kristoffer Dalby 2026-05-26 13:55:07 +00:00
4483fd0cad tsic, gh: keep unstable on Docker Hub Kristoffer Dalby 2026-05-22 10:35:20 +00:00
66a5f99bfa gh: pre-pull released tailscale images for fork-PR CI Kristoffer Dalby 2026-05-22 09:45:38 +00:00
2e49f3dc67 tsic: pull tailscale images from ghcr.io Kristoffer Dalby 2026-05-22 09:45:22 +00:00
79562b9782 hi: add list-versions subcommand Kristoffer Dalby 2026-05-22 09:44:58 +00:00
58a85b68b3 CHANGELOG: bump 0.29.0 minimum tailscale client to v1.80.0 Kristoffer Dalby 2026-05-22 07:36:39 +00:00
eb23c125fa capver, types: bump to tailscale v1.98, drop LegacyDERPString Kristoffer Dalby 2026-05-22 08:02:13 +00:00
570735f204 gen: regenerate grpc stubs with protoc-gen-go-grpc v1.6.2 Kristoffer Dalby 2026-05-19 09:37:40 +00:00
78570c754f Dockerfile: bump base images Kristoffer Dalby 2026-05-19 09:12:01 +00:00
25adfaf341 flake.nix, flake.lock: bump nixpkgs and pinned tools Kristoffer Dalby 2026-05-19 09:11:51 +00:00
be90910d33 go.mod, go.sum: bump dependencies for v0.29.0 Kristoffer Dalby 2026-05-19 09:11:15 +00:00
9ca200b6bc oidc groups: expose Groups through the gRPC API main Ryan Malloy 2026-05-21 21:29:54 -06:00
32ea1c1c84 oidc groups: fix post-merge compile and migration issues Ryan Malloy 2026-05-21 21:14:08 -06:00
2c8640f822 Merge remote-tracking branch 'origin/main' Ryan Malloy 2026-05-21 17:58:02 -06:00
5abc3c87b2 OIDC groups implementation Ryan Malloy 2026-05-21 17:55:31 -06:00
575d8ecbfd changelog: normalise 0.29.0 BREAKING and Changes sections Kristoffer Dalby 2026-05-20 10:23:23 +00:00
e4e742c776 noise: pin outer RemoteAddr onto tunnel requests Kristoffer Dalby 2026-05-20 08:48:35 +00:00
4cca63155d all: apply godoc [Name] link conventions across comments Kristoffer Dalby 2026-05-18 18:35:53 +00:00
17236fd284 all: annotate complex functions with gocyclo rationale Kristoffer Dalby 2026-05-18 18:35:23 +00:00
3e2aa5814e all: annotate gosec false positives with rationale Kristoffer Dalby 2026-05-18 18:34:58 +00:00
f905d58292 all: mechanical lint fixes Kristoffer Dalby 2026-05-18 18:34:27 +00:00
e00c899219 cmd, templates, integration: extract shared production constants Kristoffer Dalby 2026-05-18 18:33:40 +00:00
64c398f2c2 metrics, policy/v2: drop unused scaffolding + nil-error returns Kristoffer Dalby 2026-05-18 18:32:58 +00:00
7f02210863 .golangci: ignore tests for goconst, raise occurrence threshold Kristoffer Dalby 2026-05-18 18:26:01 +00:00
e07b39108f Quote autogroup:self in the CHANGELOG Florian Preinstorfer 2026-05-17 15:47:04 +02:00
e285f3c932 The headscale service is enabled by default Florian Preinstorfer 2026-05-16 11:02:19 +02:00
355733342f Update config-example links Florian Preinstorfer 2026-05-16 10:55:01 +02:00
f3f84a5a63 Add docs for policy-wide options and node attributes Florian Preinstorfer 2026-05-15 17:36:47 +02:00
4eb5899154 Add taildrive, tests, sshTests as supported features Florian Preinstorfer 2026-05-12 17:48:30 +02:00
e2f2f9211f state, servertest: property-test HA election + invariant catalogue Kristoffer Dalby 2026-05-17 20:32:53 +00:00
c7630b505b state: leave prefix unmapped when all primary candidates unhealthy Kristoffer Dalby 2026-05-17 17:08:40 +00:00
de6be71a86 state: batch HA probe results so dual-disconnect cannot flap primary Kristoffer Dalby 2026-05-14 17:04:12 +00:00
fb8eecae25 state: defer HA failover when probe target reconnected mid-cycle Kristoffer Dalby 2026-05-13 13:20:22 +00:00
a345a22a3b mapper, app: ship MagicDNS Routes as empty slices, not nil Kristoffer Dalby 2026-05-13 13:20:04 +00:00
dfcc96d808 integration: harden ACL test ergonomics Kristoffer Dalby 2026-05-13 13:19:49 +00:00
78fd6efb38 integration: replace ad-hoc test timeouts with named constants Kristoffer Dalby 2026-05-13 13:18:52 +00:00
eec3844f24 integration/dockertestutil: wait for libnetwork settle on reconnect Kristoffer Dalby 2026-05-13 13:16:48 +00:00
98e9ff4d36 integration: authenticate Docker Hub pulls and retry transient errors Kristoffer Dalby 2026-05-13 13:16:24 +00:00
4d3b567149 ci: use overlay2 storage driver instead of pinning docker v28 Kristoffer Dalby 2026-05-13 13:17:37 +00:00
963daf8908 docs: document trusted_proxies config option Kristoffer Dalby 2026-05-18 09:22:52 +00:00
c6c29c05e5 hscontrol: gate proxy header trust on trusted_proxies Kristoffer Dalby 2026-05-18 09:21:32 +00:00
1f48ebb376 go.mod: add github.com/realclientip/realclientip-go Kristoffer Dalby 2026-05-18 09:21:05 +00:00
b5b786f519 servertest: cover broader-dst via grant in filter test Kristoffer Dalby 2026-05-18 09:43:13 +00:00
2cb914df59 policy/v2: add SaaS goldens for via-grant prefix containment Kristoffer Dalby 2026-05-18 09:42:59 +00:00
e5fcd01ee6 policy/v2: match via-grant destinations by prefix overlap Kristoffer Dalby 2026-05-18 09:42:28 +00:00
af7e7a4560 db: remove unused SetApprovedRoutes and SetTags helpers Kristoffer Dalby 2026-05-13 09:53:21 +00:00
b1196baf6d state: add regression test for Node slice persistence Kristoffer Dalby 2026-05-13 09:53:11 +00:00
7a20db9f49 types: persist Node JSON slices via named IsZero types Kristoffer Dalby 2026-05-13 09:53:01 +00:00
e78a24b892 CHANGELOG: document sshTests evaluation (beta) Kristoffer Dalby 2026-05-13 14:21:26 +00:00
574a61852a integration: reject failing sshTests at headscale policy set Kristoffer Dalby 2026-05-13 14:21:21 +00:00
92a9accfcb cmd/headscale/cli: mention sshTests in policy check help Kristoffer Dalby 2026-05-13 14:21:17 +00:00
26eebcea5a policy/v2: add sshtester compat runner Kristoffer Dalby 2026-05-13 14:17:51 +00:00
013dea4f40 policy/v2: evaluate sshTests at write boundary Kristoffer Dalby 2026-05-13 14:17:04 +00:00
6a0a297c7f policy/v2: validate sshTests at parse Kristoffer Dalby 2026-05-13 14:11:48 +00:00
d600090f2c policy/v2: align SSH rule validation with Tailscale Kristoffer Dalby 2026-05-13 14:09:17 +00:00
4ad200ab73 hscontrol: preserve nil expiry on tailscaled restart Kristoffer Dalby 2026-04-16 14:48:26 +00:00
5d502bfb88 types/node, mapper: strip own IPv4 from emission when node has disable-ipv4 cap Kristoffer Dalby 2026-05-13 09:58:11 +00:00
64d13f77e8 types/config, types/node: model default-auto-update from auto_update.enabled Kristoffer Dalby 2026-05-11 16:28:09 +00:00
408f4022e4 CHANGELOG: document nodeAttrs feature and migrations Kristoffer Dalby 2026-05-11 14:54:34 +00:00
8ea4cd3faa types/node, policy/v2: drop taildrive caps from baseline emission Kristoffer Dalby 2026-05-11 14:54:03 +00:00
5ebc53c29e types/node, mapper, policy/v2: assemble self CapMap inside TailNode Kristoffer Dalby 2026-05-11 14:53:09 +00:00
b3f795f0b4 mapper, policy/v2: stamp suggest-exit-node on Peer.CapMap when exit routes approved Kristoffer Dalby 2026-05-11 14:52:04 +00:00
078b9e308f policy/v2: SaaS-derived compat tests for nodeAttrs Kristoffer Dalby 2026-05-11 14:51:09 +00:00
3f73ed5404 config, types: move randomize_client_port from server config to policy file Kristoffer Dalby 2026-05-11 14:49:36 +00:00
6fcff9e352 mapper, state: deliver nodeAttrs through MapResponse and harden nextdns DoH rewrite Kristoffer Dalby 2026-05-11 14:47:58 +00:00
a4f05b0962 policy/v2: parse, validate, and compile nodeAttrs Kristoffer Dalby 2026-05-11 14:46:38 +00:00
c4ab267c36 Refresh features page Florian Preinstorfer 2026-05-01 07:07:44 +02:00
109bfc404c Refresh docs for Grants Florian Preinstorfer 2026-04-19 12:59:20 +02:00
1a64d950fd Document supported autogroups once Florian Preinstorfer 2026-04-19 12:39:27 +02:00
edb7ad0f81 Rewrite ACL docs as policy Florian Preinstorfer 2026-04-18 20:11:19 +02:00
892ffffc4a Remove misleading comment Florian Preinstorfer 2026-05-11 12:53:22 +02:00
e13f0458bb Remove redundant prefix Florian Preinstorfer 2026-04-19 13:59:14 +02:00
68b0014871 Use distroless without quotes Florian Preinstorfer 2026-04-19 14:03:06 +02:00
484462898b Remove link to sqlite Florian Preinstorfer 2026-04-19 13:56:17 +02:00
45b698dbac Shorten container introduction Florian Preinstorfer 2026-04-19 13:55:07 +02:00
14ce7e9106 Remove link to Arch AUR headscale-git Florian Preinstorfer 2026-04-19 13:46:37 +02:00
84c7f0d450 Link to development builds Florian Preinstorfer 2026-04-19 13:45:01 +02:00
c7f221dd0a Fix typo and wording Florian Preinstorfer 2026-04-19 13:26:34 +02:00
163363a12a Use docs instead of KB Florian Preinstorfer 2026-04-18 21:25:01 +02:00
f03d41ea9a CHANGELOG: document policy tests (beta) Kristoffer Dalby 2026-04-29 08:57:00 +00:00
d5b2837231 policy/v2: match default proto set for tests with no proto Kristoffer Dalby 2026-04-29 12:26:20 +00:00
e4e209f919 policy/v2: canonicalize Protocol form during unmarshal Kristoffer Dalby 2026-04-29 12:25:01 +00:00
f172dba0e3 policy/v2: validate tests block at parse boundary Kristoffer Dalby 2026-04-29 14:34:10 +00:00
c0774a739b policy/v2: add policytester captures recorded from Tailscale SaaS Kristoffer Dalby 2026-04-29 14:33:09 +00:00
7bc701179b policy/v2: add policytester compat test runner Kristoffer Dalby 2026-04-29 14:28:50 +00:00
b29ae25356 policy/v2: evaluate the tests block on user-initiated writes Kristoffer Dalby 2026-04-29 14:27:12 +00:00
56146de377 proto: add CheckPolicy RPC Kristoffer Dalby 2026-05-11 14:09:41 +00:00
c3df84e354 policy/matcher: include CapGrant.Dsts in match destinations Kristoffer Dalby 2026-05-11 11:17:55 +00:00
795a1efe9b ci: fetch full history in golangci-lint job Kristoffer Dalby 2026-05-09 10:52:25 +00:00