Commit Graph

Select branches

Hide Pull Requests

feature/oidc-groups

main

Mono Color

• 8394e7094a
  capver: update latest (#2774) Kristoffer Dalby 2025-11-12 13:26:54 -06:00
• da9018a0eb
  types: make pre auth key use bcrypt (#2853) Kristoffer Dalby 2025-11-12 09:36:36 -06:00
• e3ced80278 hscontrol: consolidate assets into single package Kristoffer Dalby 2025-11-12 14:23:15 +01:00
• 09c9762fe0 hscontrol: convert BlankHandler to use elem-go Kristoffer Dalby 2025-11-12 04:54:29 +01:00
• 75e24de7bd flake: disable CGO in dev shell Kristoffer Dalby 2025-11-11 21:37:44 +01:00
• 2aa5b8b68d changelog: add entry for templates redesign Kristoffer Dalby 2025-11-11 21:26:15 +01:00
• 4e77e910c5 hscontrol: use octal literal syntax in test Kristoffer Dalby 2025-10-28 16:29:59 +01:00
• a496864762 hscontrol: add template HTML consistency test Kristoffer Dalby 2025-10-28 16:29:39 +01:00
• 3ed1067a95 hscontrol/templates: refactor to use CSS classes and embedded files Kristoffer Dalby 2025-10-28 16:29:00 +01:00
• 285c4e46a9 hscontrol/templates: add Material for MkDocs design assets Kristoffer Dalby 2025-10-28 16:28:07 +01:00
• 89285c317b templates: migrate OIDC callback to elem-go Kristoffer Dalby 2025-10-24 15:43:29 +02:00
• d14be8d43b
  nix: add NixOS module and tests (#2857) Kristoffer Dalby 2025-11-12 07:11:38 -06:00
• 000d5c3b0c
  prettier: use standard config for all files including changelog (#2879) Kristoffer Dalby 2025-11-12 06:59:43 -06:00
• 218a8db1b9
  add favicon to webpages (#2858) Teej 2025-11-11 22:46:57 -05:00
• 1dcb04ce9b changelog: add changelog entry Kristoffer Dalby 2025-11-11 22:00:39 +01:00
• 299cef4e99 fix: free ips from usedIps ipset on DeleteNode Andrey Bobelev 2025-10-28 11:19:14 +02:00
• 6d24afba1c
  add pre-commit hooks, move claude to agents. (#2877) Kristoffer Dalby 2025-11-11 13:35:23 -06:00
• f658a8eacd mkdocs: 0.27.1 Kristoffer Dalby 2025-11-11 20:12:46 +01:00
• 785168a7b8 changelog: prepare for 0.27.1 Kristoffer Dalby 2025-11-11 20:06:52 +01:00
• 3bd4ecd9cd fix: preserve node expiry when tailscaled restarts Kristoffer Dalby 2025-11-11 17:42:07 +01:00
• 3455d1cb59 hscontrol/db: fix RenameUser to use Updates() Kristoffer Dalby 2025-11-10 19:17:55 +01:00
• ddd31ba774 hscontrol: use Updates() instead of Save() for partial updates Kristoffer Dalby 2025-11-10 19:15:05 +01:00
• 4a8dc2d445 hscontrol/state,db: preserve node expiry on MapRequest updates Kristoffer Dalby 2025-11-10 18:36:11 +01:00
• 773a46a968 integration: add test to replicate #2862 Kristoffer Dalby 2025-11-11 17:36:27 +01:00
• 4728a2ba9e hscontrol/state: allow expired auth keys for node re-registration Kristoffer Dalby 2025-11-03 15:29:39 +01:00
• abed534628 Document how to restrict access to exit nodes per user/group Florian Preinstorfer 2025-11-05 20:40:31 +01:00
• 21e3f2598d policy: fix issue where non existent user results in empty ssh pol Kristoffer Dalby 2025-11-10 17:00:03 +01:00
• a28d9bed6d policy: reproduce 2863 in test Kristoffer Dalby 2025-11-10 16:57:07 +01:00
• 28faf8cd71 db: add defensive removal of old indicies Kristoffer Dalby 2025-11-10 16:12:41 +01:00
• 5a2ee0c391 db: add comment about removing migrations Kristoffer Dalby 2025-11-10 16:19:00 +01:00
• 5cd15c3656 fix: make state cookies valid when client uses multiple login URLs Andrey Bobelev 2025-11-04 07:18:51 +02:00
• 2024219bd1 types: Distinguish subnet and exit node access Kristoffer Dalby 2025-11-01 14:29:50 +01:00
• d9c3eaf8c8 matcher: Add func for comparing Dests and TheInternet Kristoffer Dalby 2025-11-01 14:27:59 +01:00
• bd9cf42b96 types: NodeView CanAccess uses internal Kristoffer Dalby 2025-11-01 14:27:13 +01:00
• d7a43a7cf1 state: use AllApprovedRoutes instead of SubnetRoutes Kristoffer Dalby 2025-11-01 14:28:32 +01:00
• 1c0bb0338d types: split SubnetRoutes and ExitRoutes Kristoffer Dalby 2025-11-01 14:25:07 +01:00
• c649c89e00 policy: Reproduce exit node visibility issues Kristoffer Dalby 2025-11-01 14:28:50 +01:00
• af2de35b6c
  chore: fix autogroup:self with other acl rules (#2842) Vitalij Dovhanyc 2025-11-02 11:48:27 +01:00
• 02c7c1a0e7
  cli: only validate bypass-grpc set policy (#2854) Kristoffer Dalby 2025-11-02 10:42:59 +01:00
• d23fa26395
  Fix flaky TestShuffleDERPMapDeterministic by ensuring deterministic map iteration (#2848) Copilot 2025-11-02 10:05:23 +01:00
• f9bb88ad24
  expire nodes with a custom timestamp (#2828) Andrey 2025-11-01 09:09:13 +02:00
• 456a5d5cce
  db: ignore _litestream tables when validating (#2843) Kristoffer Dalby 2025-11-01 08:08:22 +01:00
• ddbd3e14ba
  db: remove all old, unused tables (#2844) Kristoffer Dalby 2025-11-01 08:03:37 +01:00
• 0a43aab8f5 Use Debian 12 as minimum version for the deb package Florian Preinstorfer 2025-10-27 20:43:33 +01:00
• 4bd614a559 Use current stable base images for Debian and Alpine Florian Preinstorfer 2025-10-27 20:29:41 +01:00
• 19a33394f6
  changelog: set 0.27 date (#2823) Kristoffer Dalby 2025-10-27 12:14:02 +01:00
• 84fe3de251
  integration: reduce TestAutoApproveMultiNetwork matrix to 3 tests (#2815) Kristoffer Dalby 2025-10-27 12:08:52 +01:00
• 450a7b15ec #2796: Add creation_time and ko_data_creation_time to goreleaser.yml kos Paarth Shah 2025-10-26 22:20:59 -07:00
• 64b7142e22
  .goreleaser: add upgrade section (#2820) Kristoffer Dalby 2025-10-27 10:41:52 +01:00
• 52d27d58f0
  hscontrol: add /version HTTP endpoint (#2821) Kristoffer Dalby 2025-10-27 10:41:34 +01:00
• e68e2288f7
  gen: test-integration (#2814) Kristoffer Dalby 2025-10-24 17:22:53 +02:00
• c808587de0
  cli: do not show new pre-releases on stable (#2813) Kristoffer Dalby 2025-10-24 13:15:53 +02:00
• 2bf1200483
  policy: fix autogroup:self propagation and optimize cache invalidation (#2807) Kristoffer Dalby 2025-10-23 17:57:41 +02:00
• 66826232ff
  integration: add tests for api bypass (#2811) Kristoffer Dalby 2025-10-22 16:30:25 +02:00
• 1cdea7ed9b
  stricter hostname validation and replace (#2383) Kristoffer Dalby 2025-10-22 13:50:39 +02:00
• 2c9e98d3f5
  fix: guard every error statement with early return (#2810) Elyas Asmad 2025-10-22 19:48:07 +08:00
• 8becb7e54a Mention explicitly that @ is only required in policy Florian Preinstorfer 2025-10-21 13:19:59 +02:00
• ed38d00aaa Fix autogroup:self alternative example Florian Preinstorfer 2025-10-21 12:51:07 +02:00
• 8010cc574e Remove outdated hint about an empty config file Florian Preinstorfer 2025-10-19 15:41:32 +02:00
• c97d0ff23d Fix fatal error on missing config file by handling viper.ConfigFileNotFoundError Juanjo Presa 2025-08-14 13:24:36 +02:00
• 047dbda136 Add FAQ on how to disable log submission Florian Preinstorfer 2025-10-19 07:19:49 +02:00
• 2a1392fb5b Add healthcheck to container docs Florian Preinstorfer 2025-10-17 17:54:16 +02:00
• 46477b8021 Downgrade completed broadcast message to debug Florian Preinstorfer 2025-10-17 10:07:00 +02:00
• c87471136b
  integration: eventually fixups (#2799) Kristoffer Dalby 2025-10-17 08:28:30 +02:00
• e7a28a14af
  changelog: prepare for 0.27.0 (#2797) Kristoffer Dalby 2025-10-16 19:04:07 +02:00
• 4912769ab3
  update dependencies (#2798) Kristoffer Dalby 2025-10-16 19:03:30 +02:00
• c07cc491bf
  add health command (#2659) Stavros Kois 2025-10-16 15:00:11 +03:00
• c2a58a304d
  feat: add autogroup:self (#2789) Vitalij Dovhanyc 2025-10-16 12:59:52 +02:00
• fddc7117e4
  stability and race conditions in auth and node store (#2781) Kristoffer Dalby 2025-10-16 12:17:43 +02:00
• 881a6b9227 The sequential prefix allocation uses a best-effort approach Florian Preinstorfer 2025-10-15 15:37:27 +02:00
• 3fbde7a1b6 Update official.md yckwan 2025-09-24 12:31:09 +08:00
• c4a8c038cd fix: return valid AuthUrl in followup request on expired reg id Andrey Bobelev 2025-08-29 15:55:42 +02:00
• 022098fe4e chore: make reg cache expiry tunable Andrey Bobelev 2025-08-29 14:20:07 +02:00
• bd35fcf338 Add FAQ entry about policy migration in the database Florian Preinstorfer 2025-09-12 17:16:52 +02:00
• 2d680b5ebb Misc typos and spelling Florian Preinstorfer 2025-08-30 11:43:49 +02:00
• ed3a9c8d6d
  mapper: send change instead of full update (#2775) Kristoffer Dalby 2025-09-17 14:23:21 +02:00
• 4de56c40d8
  flake: goreleaser doesnt follow go nix convention (#2779) Kristoffer Dalby 2025-09-17 09:41:05 +02:00
• 40b3d54c1f
  flake.lock: Update (#2755) github-actions[bot] 2025-09-14 16:15:51 +00:00
• 30d12dafed Add FAQ entry about the recommended upgrade path Florian Preinstorfer 2025-09-12 22:11:25 +02:00
• 2b30a15a68
  cmd: add option to get and set policy directly from database (#2765) Kristoffer Dalby 2025-09-12 16:55:15 +02:00
• 2938d03878
  policy: reject unsupported fields (#2764) Kristoffer Dalby 2025-09-12 14:47:56 +02:00
• 1b1c989268
  {policy, node}: allow return paths in route reduction (#2767) Kristoffer Dalby 2025-09-12 11:47:51 +02:00
• 3950f8f171
  cli: use gobuild version handling (#2770) Kristoffer Dalby 2025-09-12 11:47:31 +02:00
• ee0ef396a2
  policy: fix ssh usermap, fixing autogroup:nonroot (#2768) Kristoffer Dalby 2025-09-12 09:12:30 +02:00
• 7056fbb63b
  derp: fix flaky shuffle test (#2772) Kristoffer Dalby 2025-09-11 15:49:02 +02:00
• c91b9fc761
  poll: add missing godoc (#2763) Kristoffer Dalby 2025-09-11 14:15:19 +02:00
• d41fb4d540 app: fix sigint hanging Kristoffer Dalby 2025-09-10 15:34:16 +02:00
• 01c1f6f82a
  policy: validate error message for asterix in ssh (#2766) Kristoffer Dalby 2025-09-10 18:41:43 +02:00
• 3f6657ae57 fix: documentation Oleksii Samoliuk 2025-09-04 16:24:03 +03:00
• 0512f7c57e .github/ISSUE_TEMPLATE: add node number to environment Kristoffer Dalby 2025-09-09 17:01:36 +02:00
• c6427aa296 Use group id instead of group name for Entra ID Florian Preinstorfer 2025-08-30 11:43:25 +02:00
• 4e6d42d5bd Keycloak's group format is configurable Florian Preinstorfer 2025-08-22 17:54:33 +02:00
• 8ff5baadbe Refresh OIDC docs Florian Preinstorfer 2025-08-22 14:14:26 +02:00
• 2f3c365b68 Describe how to remove a DERP region Florian Preinstorfer 2025-08-24 06:48:42 +02:00
• 4893cdac74 integration: make timestamp const Kristoffer Dalby 2025-09-08 11:18:42 +02:00
• 476f30ab20 state: ensure netinfo is preserved and not removed Kristoffer Dalby 2025-09-08 11:17:27 +02:00
• 233dffc186 lint and leftover Kristoffer Dalby 2025-09-05 16:32:46 +02:00
• 39443184d6 gen: new proto version Kristoffer Dalby 2025-09-03 16:48:49 +02:00
• 0303b76e1f postgres uses more memory Kristoffer Dalby 2025-09-03 15:57:30 +02:00
• 684239e015 cmd/mapresponses: add mini tool to inspect mapresp state from integration Kristoffer Dalby 2025-09-03 15:33:51 +02:00