You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Xe Iaso 898695e312
cmd/gitops-pusher: add etag cache file for the three version problem (#5124)
This allows gitops-pusher to detect external ACL changes. I'm not
sure what to call this problem, so I've been calling it the "three
version problem" in my notes. The basic problem is that at any given
time we only have two versions of the ACL file at any given point:
the version in CONTROL and the one in the git repo. In order to
check if there has been tampering of the ACL files in the admin
panel, we need to have a _third_ version to compare against.

In this case I am not storing the old ACL entirely (though that could
be a reasonable thing to add in the future), but only its sha256sum.
This allows us to detect if the shasum in control matches the shasum
we expect, and if that expectation fails, then we can react
accordingly.

This will require additional configuration in CI, but I'm sure that
can be done.

Signed-off-by: Xe <xe@tailscale.com>
2 years ago
..
addlicense cmd/addlicense: add command to add licenseheaders to generated code 3 years ago
cloner cmd/viewer: add codegen tool for Views 3 years ago
derper derp: plumb '/derp' request context through (#5083) 2 years ago
derpprobe all: use any instead of interface{} 3 years ago
gitops-pusher cmd/gitops-pusher: add etag cache file for the three version problem (#5124) 2 years ago
hello all: use strings.Cut even more 3 years ago
mkpkg cmd/mkpkg: use package flag (#4373) 3 years ago
nginx-auth cmd/nginx-auth: maintainer scripts and tailnet checking (#4460) 3 years ago
printdep Docker: add ALPINE.txt to manage alpine versions 2 years ago
proxy-to-grafana cmd/proxy-to-grafana: use localClient.GetCertificate (#5024) 2 years ago
speedtest cmd: upgrade to ffcli v3 3 years ago
tailscale net/netcheck: test for OS IPv6 support as well as connectivity. 2 years ago
tailscaled go.mod: bump gvisor.dev/gvisor 2 years ago
testcontrol all: use any instead of interface{} 3 years ago
tsconnect cmd/tsconnect: pin yarn and node 2 years ago
tsshd cmd/tsshd: delete, leaving only forwarding docs 3 years ago
viewer cmd/viewer,types/views: add support for views of maps 3 years ago