You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Nick Khyl f1c7b463cd ipn/{ipnauth,ipnlocal,localapi}: make EditPrefs return an error if changing exit node is restricted by policy ... We extract checkEditPrefsAccessLocked, adjustEditPrefsLocked, and onEditPrefsLocked from the EditPrefs execution path, defining when each step is performed and what behavior is allowed at each stage. Currently, this is primarily used to support Always On mode, to handle the Exit Node enablement toggle, and to report prefs edit metrics. We then use it to enforce Exit Node policy settings by preventing users from setting an exit node and making EditPrefs return an error when an exit node is restricted by policy. This enforcement is also extended to the Exit Node toggle. These changes prepare for supporting Exit Node overrides when permitted by policy and preventing logout while Always On mode is enabled. In the future, implementation of these methods can be delegated to ipnext extensions via the feature hooks. Updates tailscale/corp#29969 Updates tailscale/corp#26249 Signed-off-by: Nick Khyl <nickk@tailscale.com>		5 months ago
..
cache	util/cache: fix missing interface methods (#11275)	2 years ago
cibuild	all: update copyright and license headers	3 years ago
clientmetric	util/clientmetric: use counter in aggcounter	10 months ago
cloudenv	all: use math/rand/v2 more	2 years ago
cmpver	util/cmpver: add Less/LessEq helper funcs	2 years ago
codegen	util/codegen: treat unique.Handle as an opaque value type	1 year ago
cstruct	all: use Go 1.21's binary.NativeEndian	11 months ago
ctxkey	all: use reflect.TypeFor now available in Go 1.22 (#11078)	2 years ago
deephash	util/deephash: move tests that depend on other tailscale packages to deephash_test	7 months ago
dirwalk	all: use tstest.Replace more	3 years ago
dnsname	tailcfg: adjust ServiceName.Validate to use vizerror	10 months ago
eventbus	util/eventbus: fix docstrings (#16401)	5 months ago
execqueue	control/controlclient,util/execqueue: extract execqueue into a package	2 years ago
expvarx	all: use Go 1.22 range-over-int	2 years ago
goroutines	ipn/ipnlocal, util/goroutines: track goroutines for tests, shutdown	11 months ago
groupmember	util/groupmember: fail earlier if group doesn't exist, use slices.Contains	2 years ago
hashx	all: use Go 1.22 range-over-int	2 years ago
httphdr	util/httphdr: add new package for parsing HTTP headers (#9797)	2 years ago
httpm	util/httpm: don't run test if .git doesn't exist	2 years ago
jsonutil	all: use Go 1.22 range-over-int	2 years ago
limiter	all: add test for package comments, fix, add comments as needed	1 year ago
lineiter	types/result, util/lineiter: add package for a result type, use it	1 year ago
lineread	all: update copyright and license headers	3 years ago
linuxfw	cmd/containerboot,kube/ingressservices: proxy VIPService TCP/UDP traffic to cluster Services (#15897)	7 months ago
lru	util/slicesx: add MapKeys and MapValues from golang.org/x/exp/maps	11 months ago
mak	util/mak: delete long-deprecated, unused, pre-generics NonNil func	7 months ago
multierr	all: use Go 1.22 range-over-int	2 years ago
must	util/must: add Get2 for functions that return two values	6 months ago
nocasemaps	all: use Go 1.22 range-over-int	2 years ago
osdiag	all: add test for package comments, fix, add comments as needed	1 year ago
osshare	all: add test for package comments, fix, add comments as needed	1 year ago
osuser	ssh/tailssh: add Plan 9 support for Tailscale SSH	8 months ago
pidowner	types/result, util/lineiter: add package for a result type, use it	1 year ago
pool	util/pool: add package for storing and using a pool of items	2 years ago
precompress	all: update copyright and license headers	3 years ago
progresstracking	ipn/localapi: add support for multipart POST to file-put	2 years ago
prompt	util/prompt: make yes/no prompt reusable	5 months ago
quarantine	all: update copyright and license headers	3 years ago
race	all: use Go 1.22 range-over-int	2 years ago
racebuild	all: update copyright and license headers	3 years ago
rands	wgengine/magicsock: use math/rands/v2	2 years ago
reload	all: use math/rand/v2 more	2 years ago
ringbuffer	all: use Go 1.22 range-over-int	2 years ago
set	util/set: add SmallSet.SoleElement, fix bug, add more tests	6 months ago
singleflight	util/singleflight: add DoChanContext	2 years ago
slicesx	util/slicesx: add AppendNonzero	11 months ago
stringsx	util/stringsx: add package for extra string functions, like CompareFold	12 months ago
syspolicy	ipn/{ipnauth,ipnlocal,localapi}: make EditPrefs return an error if changing exit node is restricted by policy	5 months ago
sysresources	util/sysresources, magicsock: scale DERP buffer based on system memory	3 years ago
systemd	util/systemd: don't link systemd-notification package on Android	7 months ago
testenv	nettest, *: add option to run HTTP tests with in-memory network	8 months ago
topk	all: use Go 1.22 range-over-int	2 years ago
truncate	util/truncate: support []byte as well (#11614)	2 years ago
usermetric	wgengine/filter: add check for unknown proto	10 months ago
vizerror	util/vizerror: add WrapWithMessage	1 year ago
winutil	cmd/tailscaled,util/syspolicy/source,util/winutil/gp: disallow acquiring the GP lock during service startup	10 months ago
zstdframe	all: use Go 1.22 range-over-int	2 years ago