You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Dominic Black 570cb018da
ipn/localapi: require only read permission for WatchIPNBus (#7798)
Allow calls to `WatchIPNBus` to be permformed by clients with
Readonly permissions. This brings it in line with the permissions
required for `Status`, which also exposes the similar information.

This allows clients to get realtime updates about the tailnet
in their own applications, without needing to actively poll the
`Status` endpoint.

Fixes https://github.com/tailscale/tailscale/issues/7797

Signed-off-by: Dominic Black <dom@encore.dev>
1 year ago
..
ipnauth all: update copyright and license headers 2 years ago
ipnlocal ipn/ipnlocal: [serve/funnel] add forwarded host and proto header (#8224) 1 year ago
ipnserver tsd: add package with System type to unify subsystem init, discovery 2 years ago
ipnstate tka: provide authority StateID in NetworkLockStatus response (#8200) 2 years ago
localapi ipn/localapi: require only read permission for WatchIPNBus (#7798) 1 year ago
policy ipn: prefer allow/denylist terminology 2 years ago
store ipn/store/awsstore: persist state with intelligent tiering 2 years ago
backend.go all: update copyright and license headers 2 years ago
doc.go all: update copyright and license headers 2 years ago
fake_test.go all: update copyright and license headers 2 years ago
ipn_clone.go all: update copyright and license headers 2 years ago
ipn_view.go all: update copyright and license headers 2 years ago
prefs.go all: update copyright and license headers 2 years ago
prefs_test.go all: update copyright and license headers 2 years ago
serve.go cmd/tailscale/cli: do not allow turning Funnel on while shields-up (#7770) 2 years ago
serve_test.go ipn: add Funnel port check from nodeAttr 2 years ago
store.go ipn/store: add support for stores to hook into a custom dialer 2 years ago