You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
Irbe Krumina bbe194c80d
cmd/k8s-operator: correctly determine cluster domain (#11512)
Kubernetes cluster domain defaults to 'cluster.local', but can also be customized.
We need to determine cluster domain to set up in-cluster forwarding to our egress proxies.
This was previously hardcoded to 'cluster.local', so was the egress proxies were not usable in clusters with custom domains.
This PR ensures that we attempt to determine the cluster domain by parsing /etc/resolv.conf.
In case the cluster domain cannot be determined from /etc/resolv.conf, we fall back to 'cluster.local'.

Updates tailscale/tailscale#10399,tailscale/tailscale#11445

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
2 years ago
.bencher bencher: add config to suppress failures on benchmark regressions. 4 years ago
.github Revert "licenses: add gliderlabs/ssh license" 2 years ago
appc appc: optimize dns response observation for large route tables 2 years ago
atomicfile various: add golangci-lint, fix issues (#7905) 3 years ago
chirp all: update copyright and license headers 3 years ago
client build(deps-dev): bump vite from 5.1.4 to 5.1.7 in /client/web 2 years ago
clientupdate all: use Go 1.22 range-over-int 2 years ago
cmd cmd/k8s-operator: correctly determine cluster domain (#11512) 2 years ago
control all: use Go 1.22 range-over-int 2 years ago
derp all: use Go 1.22 range-over-int 2 years ago
disco disco: correct noun for nacl box type in disco docs 2 years ago
docs docs/windows/policy: add missing key expiration warning interval 2 years ago
doctor doctor/ethtool, ipn/ipnlocal: add ethtool bugreport check 2 years ago
drive drive: rewrite Location headers 2 years ago
envknob envknob: ensure f is not nil before using it 2 years ago
health all: use Go 1.22 range-over-int 2 years ago
hostinfo hostinfo: use Distro field for distinguishing Windows Server builds 2 years ago
internal/tooldeps various: add golangci-lint, fix issues (#7905) 3 years ago
ipn ipn/ipnlocal: remove origin and referer headers from Taildrive requests 2 years ago
jsondb all: update copyright and license headers 3 years ago
k8s-operator cmd/k8s-operator,k8s-operator: document tailscale.com Custom Resource Definitions better. (#11665) 2 years ago
kube cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating 2 years ago
licenses licenses: update license notices 2 years ago
log all: use zstdframe where sensible (#11491) 2 years ago
logpolicy all: use zstdframe where sensible (#11491) 2 years ago
logtail all: use Go 1.22 range-over-int 2 years ago
metrics all: use Go 1.22 range-over-int 2 years ago
net interfaces: create android impl (#11784) 2 years ago
packages/deb go.mod: upgrade nfpm to v2 (#8786) 2 years ago
paths all: use Go 1.22 range-over-int 2 years ago
portlist all: use Go 1.22 range-over-int 2 years ago
posture cmd/tailscaled, net/tstun: build for aix/ppc64 2 years ago
prober all: use Go 1.22 range-over-int 2 years ago
proxymap wgengine, proxymap: split out port mapping from Engine to new type 2 years ago
release version/mkversion: enforce synology versions within int32 range 2 years ago
safesocket all: use Go 1.22 range-over-int 2 years ago
safeweb safeweb: allow object-src: self in CSP (#11782) 2 years ago
scripts scripts/installer.sh: add rpm GPG key import (#11686) 2 years ago
smallzstd all: use Go 1.22 range-over-int 2 years ago
ssh/tailssh all: use Go 1.22 range-over-int 2 years ago
syncs all: use Go 1.22 range-over-int 2 years ago
tailcfg tailcfg: rename exit node destination network flow log node attribute (#11779) 2 years ago
taildrop all: use new AppendEncode methods available in Go 1.22 (#11079) 2 years ago
tempfork cmd/tailscale: add shell tab-completion 2 years ago
tka all: use Go 1.22 range-over-int 2 years ago
tool tool/gocross: add android autoflags (#11465) 2 years ago
tsconst all: update copyright and license headers 3 years ago
tsd tailscale: update tailfs functions and vars to use drive naming (#11597) 2 years ago
tsnet all: use Go 1.22 range-over-int 2 years ago
tstest wgengine/magicsock: disable portmapper in tunchan-faked tests 2 years ago
tstime all: use Go 1.22 range-over-int 2 years ago
tsweb all: use Go 1.22 range-over-int 2 years ago
types all: use Go 1.22 range-over-int 2 years ago
util all: use Go 1.22 range-over-int 2 years ago
version all: use Go 1.22 range-over-int 2 years ago
wf go.mod, all: move away from inet.af domain seized by Taliban 2 years ago
wgengine wgengine/magicsock: disable portmapper in tunchan-faked tests 2 years ago
words words: add a list of things you should yahoo! 2 years ago
.gitattributes .: add .gitattributes entry to use Go hunk-header driver 4 years ago
.gitignore client/web: always use new web client; remove old client 2 years ago
.golangci.yml ci: run 'go vet' in golangci-lint; fix errors in tests 2 years ago
ALPINE.txt ALPINE.txt,Dockerfile{.base},build_docker.sh: bump alpine (#10543) 2 years ago
AUTHORS Move Linux client & common packages into a public repo. 6 years ago
CODEOWNERS CODEOWNERS: add the start of an owners file 2 years ago
CODE_OF_CONDUCT.md Add a code of conduct. 6 years ago
Dockerfile Dockerfile: use Go 1.22 2 years ago
Dockerfile.base ALPINE.txt,Dockerfile{.base},build_docker.sh: bump alpine (#10543) 2 years ago
LICENSE all: update tools that manage copyright headers 3 years ago
Makefile Makefile: fix default SYNO_ARCH in Makefile 2 years ago
PATENTS Move Linux client & common packages into a public repo. 6 years ago
README.md go.mod, README.md: use Go 1.22 2 years ago
SECURITY.md Add a SECURITY.md for vulnerability reports. 6 years ago
VERSION.txt VERSION.txt: this is v1.65.0 2 years ago
api.md api.md: add missing backtick to GET searchpaths doc (#11459) 2 years ago
build_dist.sh cmd/tailscale: add shell tab-completion 2 years ago
build_docker.sh ipn/store: omit AWS & Kubernetes support on 'small' Linux GOARCHes 2 years ago
flake.lock flake.nix: build tailscale with go 1.22 2 years ago
flake.nix go.mod.sri: update SRI hash for go.mod changes 2 years ago
go.mod go.mod: bump golang.org/x/net (#11775) 2 years ago
go.mod.sri go.mod.sri: update SRI hash for go.mod changes 2 years ago
go.sum go.mod: bump golang.org/x/net (#11775) 2 years ago
go.toolchain.branch go.toolchain.rev: bump to Go 1.22.0 (#11055) 2 years ago
go.toolchain.rev go.toolchain.rev: bump to Go 1.22.2 2 years ago
gomod_test.go go.mod: add test that replace directives aren't added in oss 2 years ago
header.txt cmd/k8s-operator: operator can create subnetrouter (#9505) 2 years ago
pull-toolchain.sh pull-toolchain.sh: don't run update-flake.sh 3 years ago
shell.nix go.mod.sri: update SRI hash for go.mod changes 2 years ago
staticcheck.conf all: cleanup unused code, part 2 (#10670) 2 years ago
update-flake.sh Code Improvements (#11311) 2 years ago
version-embed.go version: return correct Meta.MajorMinorPatch in non-dev builds 3 years ago
version_test.go go.mod,wgengine/netstack: bump gvisor 2 years ago

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.22. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See git log for our commit message style. It's basically the same as Go's style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.