You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Dominic Black 570cb018da
ipn/localapi: require only read permission for WatchIPNBus (#7798)
Allow calls to `WatchIPNBus` to be permformed by clients with
Readonly permissions. This brings it in line with the permissions
required for `Status`, which also exposes the similar information.

This allows clients to get realtime updates about the tailnet
in their own applications, without needing to actively poll the
`Status` endpoint.

Fixes https://github.com/tailscale/tailscale/issues/7797

Signed-off-by: Dominic Black <dom@encore.dev>
1 year ago
..
ipnauth all: update copyright and license headers 1 year ago
ipnlocal ipn/ipnlocal: [serve/funnel] add forwarded host and proto header (#8224) 1 year ago
ipnserver tsd: add package with System type to unify subsystem init, discovery 1 year ago
ipnstate tka: provide authority StateID in NetworkLockStatus response (#8200) 1 year ago
localapi ipn/localapi: require only read permission for WatchIPNBus (#7798) 1 year ago
policy ipn: prefer allow/denylist terminology 1 year ago
store ipn/store/awsstore: persist state with intelligent tiering 1 year ago
backend.go all: update copyright and license headers 1 year ago
doc.go all: update copyright and license headers 1 year ago
fake_test.go all: update copyright and license headers 1 year ago
ipn_clone.go all: update copyright and license headers 1 year ago
ipn_view.go all: update copyright and license headers 1 year ago
prefs.go all: update copyright and license headers 1 year ago
prefs_test.go all: update copyright and license headers 1 year ago
serve.go cmd/tailscale/cli: do not allow turning Funnel on while shields-up (#7770) 1 year ago
serve_test.go ipn: add Funnel port check from nodeAttr 1 year ago
store.go ipn/store: add support for stores to hook into a custom dialer 1 year ago