You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Irbe Krumina 34734ba635 ipn/store/kubestore,kube,envknob,cmd/tailscaled/depaware.txt: allow kubestore read/write custom TLS secrets (#15307) ... This PR adds some custom logic for reading and writing kube store values that are TLS certs and keys: 1) when store is initialized, lookup additional TLS Secrets for this node and if found, load TLS certs from there 2) if the node runs in certs 'read only' mode and TLS cert and key are not found in the in-memory store, look those up in a Secret 3) if the node runs in certs 'read only' mode, run a daily TLS certs reload to memory to get any renewed certs Updates tailscale/corp#24795 Signed-off-by: Irbe Krumina <irbe@tailscale.com>		9 months ago
..
addlicense	all: fix golangci-lint errors	11 months ago
build-webclient	client/web: precompress assets	2 years ago
checkmetrics	cmd/checkmetrics: add command for checking metrics against kb	1 year ago
cloner	cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types	1 year ago
connector-gen	cmd/connector-gen: add helper tool for wide app connector configurations	2 years ago
containerboot	cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303)	9 months ago
derper	cmd/derper, derp/derphttp: support, generate self-signed IP address certs	9 months ago
derpprobe	prober: support filtering regions by region ID in addition to code	11 months ago
dist	release/dist/qnap: add qnap target builder	2 years ago
get-authkey	cmd,tsnet,internal/client: create internal shim to deprecated control plane API	10 months ago
gitops-pusher	cmd/gitops-pusher: log error details when unable to fetch ACL ETag	10 months ago
hello	cmd/hello: display native ipv4 (#15191)	9 months ago
k8s-nameserver	cmd/k8s-nameserver: fix AAAA record query response (#12412)	2 years ago
k8s-operator	cmd/k8s-operator: ensure old VIPServices are cleaned up (#15344)	9 months ago
mkmanifest	cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS	3 years ago
mkpkg	go.mod: upgrade nfpm to v2 (#8786)	2 years ago
mkversion	version/mkversion: open-source version generation logic	3 years ago
nardump	all: update copyright and license headers	3 years ago
natc	cmd/natc: error and log when IP range is exhausted	9 months ago
netlogfmt	all: use Go 1.22 range-over-int	2 years ago
nginx-auth	tailcfg,all: add and use Node.IsTagged()	3 years ago
pgproxy	all: use new LocalAPI client package location	10 months ago
printdep	cmd/printdep: print correct toolchain URL	3 years ago
proxy-to-grafana	cmd/proxy-to-grafana: support setting Grafana role via grants	9 months ago
sniproxy	all: use new LocalAPI client package location	10 months ago
speedtest	all: update copyright and license headers	3 years ago
ssh-auth-none-demo	ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh	10 months ago
stunc	cmd/stunc: enforce read timeout deadline (#14309)	1 year ago
stund	go.toolchain.branch: update to Go 1.24 (#15016)	10 months ago
stunstamp	cmd/stunstamp: add protocol context to timeout logs (#13422)	1 year ago
sync-containers	all: adjust some build tags for plan9	2 years ago
systray	cmd/systray: add cmd/systray back as a small client/systray wrapper	11 months ago
tailscale	go.toolchain.branch: update to Go 1.24 (#15016)	10 months ago
tailscaled	ipn/store/kubestore,kube,envknob,cmd/tailscaled/depaware.txt: allow kubestore read/write custom TLS secrets (#15307)	9 months ago
testcontrol	all: use Go 1.22 range-over-int	2 years ago
testwrapper	cmd/testwrapper: print failed tests preventing retry (#15270)	9 months ago
tl-longchain	all: use new LocalAPI client package location	10 months ago
tsconnect	go.toolchain.branch: update to Go 1.24 (#15016)	10 months ago
tsidp	cmd/tsidp: allow CORS requests to openid-configuration (#15229)	9 months ago
tsshd	all: update copyright and license headers	3 years ago
tta	all: use new LocalAPI client package location	10 months ago
viewer	cmd/viewer,all: consistently use "read-only" instead of "readonly"	11 months ago
vnet	tstest/natlab/vnet: add start of IPv6 support	1 year ago
xdpderper	all: add test for package comments, fix, add comments as needed	1 year ago