You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
Maisem Ali 24509f8b22 cmd/k8s-operator: add support for control plane assigned groups
Previously we would use the Impersonate-Group header to pass through
tags to the k8s api server. However, we would do nothing for non-tagged
nodes. Now that we have a way to specify these via peerCaps respect those
and send down groups for non-tagged nodes as well.

For tagged nodes, it defaults to sending down the tags as groups to retain
legacy behavior if there are no caps set. Otherwise, the tags are omitted.

Updates #5055

Signed-off-by: Maisem Ali <maisem@tailscale.com>
1 year ago
.bencher
.github scripts/installer.sh: set Deepin to a debian version 1 year ago
atomicfile
chirp
client tailcfg: rename prototype field to reflect its status 1 year ago
clientupdate clientupdate: return NOTREACHED for macsys (#8898) 1 year ago
cmd cmd/k8s-operator: add support for control plane assigned groups 1 year ago
control control/controlclient: move lastUpdateGenInformed to tighter scope 1 year ago
derp derp: include src IPs in mesh watch messages 1 year ago
disco wgengine,ipn,cmd/tailscale: add size option to ping (#8739) 1 year ago
docs docs/k8s: don't call kubectl directly from Makefile 1 year ago
doctor
envknob
health cmd/tailscale: warn if node is locked out on bringup 1 year ago
hostinfo tailcfg: Add FirewallMode to NetInfo to record wether host using iptables or nftables 1 year ago
internal/tooldeps
ipn client/tailscale: add LocalClient.IncrementMetric func 1 year ago
jsondb
kube
licenses cmd/tailscale: refactor shared utility methods 1 year ago
log logpolicy, various: allow overriding log function 1 year ago
logpolicy util/testenv: add new package to hold InTest 1 year ago
logtail logtail: use tstime (#8607) 1 year ago
metrics metrics: add histogram support 1 year ago
net net/art: move child table pointers out of strideEntry 1 year ago
packages/deb go.mod: upgrade nfpm to v2 (#8786) 1 year ago
paths
portlist
prober
release cmd/dist,release/dist: expose RPM signing hook (#8789) 1 year ago
safesocket
scripts scripts/installer.sh: set Deepin to a debian version 1 year ago
smallzstd
ssh/tailssh ssh/tailssh: fix gokrazy SSH crash 1 year ago
syncs syncs: add ShardedMap.Mutate 1 year ago
tailcfg tailcfg: rename prototype field to reflect its status 1 year ago
tempfork tempfork/heap: add copy of Go's container/heap but using generics 1 year ago
tka all: implement lock revoke-keys command 1 year ago
tool tool/{node,yarn}: update node and yarn tools 1 year ago
tsconst
tsd
tsnet client/web: add barebones vite dev setup 1 year ago
tstest tailscale/cli: add interactive flow for enabling Funnel 1 year ago
tstime tstime/mono: remove unsafe 1 year ago
tsweb tsweb: add request ID for errors 1 year ago
types types/persist: drop duplicated Persist.LoginName 1 year ago
util util/osdiag: add logging for winsock layered service providers to Windows bugreports 1 year ago
version cmd/tailscale/cli,version/distro: update support for Alpine (#8701) 1 year ago
wf
wgengine tailcfg: Add FirewallMode to NetInfo to record wether host using iptables or nftables 1 year ago
words words: ack Miles Prower (#8479) 1 year ago
.gitattributes
.gitignore client/web: copy existing UI to basic react components 1 year ago
.golangci.yml
ALPINE.txt
AUTHORS
CODEOWNERS CODEOWNERS: add the start of an owners file 1 year ago
CODE_OF_CONDUCT.md
Dockerfile all: require Go 1.21 1 year ago
Dockerfile.base
LICENSE
Makefile
PATENTS
README.md all: require Go 1.21 1 year ago
SECURITY.md
VERSION.txt VERSION.txt: this is v1.49.0 (#8907) 1 year ago
api.md api.md: update device authorize API docs to allow for deauth (#8728) 1 year ago
build_dist.sh
build_docker.sh
flake.lock
flake.nix go.mod.sri: update SRI hash for go.mod changes 1 year ago
go.mod all: require Go 1.21 1 year ago
go.mod.sri go.mod.sri: update SRI hash for go.mod changes 1 year ago
go.sum all: require Go 1.21 1 year ago
go.toolchain.branch go.toolchain: switch to tailscale.go1.21 (#8415) 1 year ago
go.toolchain.rev tstime/mono: remove unsafe 1 year ago
pull-toolchain.sh
shell.nix go.mod.sri: update SRI hash for go.mod changes 1 year ago
staticcheck.conf
update-flake.sh
version-embed.go
version_test.go

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.21. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See git log for our commit message style. It's basically the same as Go's style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.