3297 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Kristoffer Dalby	5345f19693	fix issue where some oidc claim bools are sent as string (#2297) ... Jumpcloud send invalid json, so we need to handle it. Fixes #2293 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-12-16 11:26:32 +01:00
Kristoffer Dalby	ec8729b772	fix sighup issue with empty acl (#2296) ... Fixes #2291 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-12-16 07:48:19 +01:00
github-actions[bot]	e00b9d9a91	flake.lock: Update (#2294)	2024-12-15 06:46:14 +00:00
Kristoffer Dalby	58d089ce0a	fix deletion of exit routes without nodes (#2286) ... Fixes #2259 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-12-13 20:15:24 +01:00
Kristoffer Dalby	76d26a7eec	update oidc part of changelog for 0.24.0 (#2285)	2024-12-13 12:35:24 +00:00
Kristoffer Dalby	380fcdba17	Add worker reading extra_records_path from file (#2271) ... * consolidate scheduled tasks into one goroutine Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * rename Tailcfg dns struct Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * add dns.extra_records_path option Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * prettier lint Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * go-fmt Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> --------- Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-12-13 07:52:40 +00:00
Florian Preinstorfer	89a648c7dd	Remove use_username_in_magic_dns option ... Upgrade the use of dns.use_username_in_magic_dns or dns_config.use_username_in_magic_dns to a fatal error and remove the option from the example configuration and integration tests. Fixes: #2219	2024-12-11 18:39:35 +01:00
Vitalij Dovhanyc	697d80d5a8	chore: configure some actions to be skipped for forks (#2005) ... * chore: configure some actions to be skipped for forks * chore: build docs only when it changes	2024-12-11 16:44:37 +01:00
Kristoffer Dalby	757defa2f2	run cross compile of headscale as part of build (#2270)	2024-12-10 16:26:53 +01:00
Kristoffer Dalby	64fd1f9483	restructure command/api to use stable IDs (#2261)	2024-12-10 16:23:55 +01:00
Kristoffer Dalby	08bd4b9bc5	fix docker network caps (#2273) ... Docker releases a patch release which changed the required permissions to be able to do tun devices in containers, this caused all containers to fail in tests causing us to fail all tests. This fixes it, and adds some tools for debugging in the future. Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-12-09 16:15:38 +00:00
github-actions[bot]	26d91ae513	flake.lock: Update (#2266)	2024-12-08 09:10:42 +00:00
Florian Preinstorfer	75e74117db	Add FAQ entry on which database to use ... Fixes: #2257	2024-12-04 06:08:44 +01:00
Florian Preinstorfer	d2a86b1ef2	Fix broken indent	2024-12-04 06:08:44 +01:00
Florian Preinstorfer	0d3cf74098	Fix README links to point to the stable version	2024-12-04 06:08:44 +01:00
Florian Preinstorfer	44456497b0	Add versioned documentation ... Setup mike to provide versioned builds of the documentation. The goal is to have versioned docs for stable releases (0.23.0, 0.24.0) and development docs that can progress along with the code. This allows us to tailor docs to the next upcoming version as we no longer need to care about diversion between rendered docs and the latest release. Versions: * development (alias: unstable) on each push to the main branch * MAJOR.MINOR.PATCH (alias: stable, latest for the newest version) * for each "final" release tag * for each push to doc maintenance branches: doc/MAJOR.MINOR.PATCH The default version should the current stable version. The doc maintenance branches may be used to update the version specific documentation when issues arise after a release.	2024-12-02 16:51:50 +01:00
Florian Preinstorfer	7512e236d6	Bump deprecated github actions	2024-11-27 09:52:08 +01:00
Kristoffer Dalby	f7b0cbbbea	wrap policy in policy manager interface (#2255) ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-26 15:16:06 +01:00
github-actions[bot]	2c1ad6d11a	flake.lock: Update (#2254)	2024-11-24 09:42:22 +00:00
Kristoffer Dalby	fffd23602b	Resolve user to stable unique ID in policy (#2205)	2024-11-24 00:13:27 +01:00
Kristoffer Dalby	3a2589f1a9	rename dockerfile to integration to avoid confusion (#2225) ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:36 +00:00
Kristoffer Dalby	f6276ab9d2	fix postgres constraints, add postgres testing ... This commit fixes the constraint syntax so it is both valid for sqlite and postgres. To validate this, I've added a new postgres testing library and a helper that will spin up local postgres, setup a db and use it in the constraints tests. This should also help testing db stuff in the future. postgres has been added to the nix dev shell and is now required for running the unit tests. Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:55 +01:00
Kristoffer Dalby	7d9b430ec2	fix constraints ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:55 +01:00
Kristoffer Dalby	3780c9fd69	fix nil in test ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:55 +01:00
Kristoffer Dalby	281025bb16	fix constraints ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:55 +01:00
Kristoffer Dalby	5e7c3153b9	nits ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:55 +01:00
Kristoffer Dalby	7ba0c3d515	use userID instead of username everywhere ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:55 +01:00
Kristoffer Dalby	4b58dc6eb4	make preauthkey tags test stable ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:55 +01:00
Kristoffer Dalby	4dd12a2f97	fix oidc test, add tests for migration ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:55 +01:00
Kristoffer Dalby	2fe65624c0	restore strip_email_domain for migration ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:55 +01:00
Kristoffer Dalby	35b669fe59	add iss to identifier, only set email if verified ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:55 +01:00
Kristoffer Dalby	dc07779143	add @ to end of username if not present ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:55 +01:00
Kristoffer Dalby	d72663a4d0	remove log print ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:55 +01:00
Kristoffer Dalby	0a82d3f17a	update changelog ... Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:55 +01:00
Kristoffer Dalby	78214699ad	Harden OIDC migration and make optional ... This commit hardens the migration part of the OIDC from the old username based approach to the new sub based approach and makes it possible for the operator to opt out entirely. Fixes #1990 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-23 21:14:55 +01:00
Kristoffer Dalby	64bb56352f	make configurable wal auto checkpoint (#2242)	2024-11-23 21:03:48 +01:00
nblock	dc17b4d378	Documentation dependencies (#2252) ... * Use a trailing slash recommended by mkdocs-material * Update doc requirements Let mkdocs-material resolve its imaging dependencies (cairosvg and pillow) and fix a dependabot warning along the way. Reference compatible versions by major.minor.	2024-11-22 16:52:36 +00:00
Kristoffer Dalby	a6b19e85db	more linter fixups (#2212) ... * linter fixes Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * conf Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * update nix hash Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> --------- Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2024-11-22 15:54:58 +00:00
ArcticLampyrid	edf9e25001	feat: support client verify for derp (add integration tests) (#2046) ... * feat: support client verify for derp * docs: fix doc for integration test * tests: add integration test for DERP verify endpoint * tests: use `tailcfg.DERPMap` instead of `[]byte` * refactor: introduce func `ContainsNodeKey` * tests(dsic): use string builder for cmd args * ci: fix tests order * tests: fix derper failure * chore: cleanup * tests(verify-client): perfer to use `CreateHeadscaleEnv` * refactor(verify-client): simplify error handling * tests: fix `TestDERPVerifyEndpoint` * refactor: make `doVerify` a seperated func --------- Co-authored-by: 117503445 <t117503445@gmail.com>	2024-11-22 13:23:05 +01:00
Motiejus Jakštys	c6336adb01	config: loosen up BaseDomain and ServerURL checks (#2248) ... * config: loosen up BaseDomain and ServerURL checks Requirements [here][1]: > OK: > server_url: headscale.com, base: clients.headscale.com > server_url: headscale.com, base: headscale.net > > Not OK: > server_url: server.headscale.com, base: headscale.com > > Essentially we have to prevent the possibility where the headscale > server has a URL which can also be assigned to a node. > > So for the Not OK scenario: > > if the server is: server.headscale.com, and a node joins with the name > server, it will be assigned server.headscale.com and that will break > the connection for nodes which will now try to connect to that node > instead of the headscale server. Fixes #2210 [1]: https://github.com/juanfont/headscale/issues/2210#issuecomment-2488165187 * server_url and base_domain: re-word error message, fix a one-off bug and add a test case for the bug. * lint * lint again	2024-11-22 13:21:44 +01:00
enoperm	5fbf3f8327	Websocket derp test fixes (#2247) ... * integration testing: add and validate build-time options for tailscale head * fixup! integration testing: add and validate build-time options for tailscale head integration testing: comply with linter * fixup! fixup! integration testing: add and validate build-time options for tailscale head integration testing: tsic.New must never return nil * fixup! fixup! fixup! integration testing: add and validate build-time options for tailscale head * minor fixes	2024-11-22 11:57:01 +01:00
Nathan Sweet	6275399327	Update tls.md to mention using the full cert chain (#2243)	2024-11-18 06:12:12 +00:00
nblock	29119bb7f4	Misc doc fixes (#2240) ... * Link back to node registration docs * adjust wording in apple docs * Mention client specific page to check if headscale works Ref: #2238	2024-11-18 05:46:58 +01:00
github-actions[bot]	93ba21ede5	flake.lock: Update (#2239)	2024-11-17 19:38:50 +00:00
nblock	a7874af3d0	Use discord server invite link (#2235) ... Replace channel links with links to discord invite link and remove channel list. Fixes: #1521	2024-11-16 07:06:15 +01:00
nblock	e7245856c5	Refresh remote CLI documentation (#2216) ... * Document to either use a minimal configuration file or environment variables to connect with a remote headscale instance. * Document a workaround specific for headscale 0.23.0. * Remove reference to ancient headscale version. * Use `cli.insecure: true` or `HEADSCALE_CLI_INSECURE=1` to skip certificate verification. * Style and typo fixes Ref: #2193	2024-11-13 18:35:42 +01:00
nblock	2345c38e1e	Add a page for third-party tools (#2217) ... * Remove status from web-ui docs Rename the title to indicate that there multiple web interfaces available. Do not track the status of each web interface here as their status is subject to change over time. * Add page for third-party tools and scripts	2024-11-12 16:53:30 +01:00
github-actions[bot]	8cfaa6bdac	flake.lock: Update (#2222)	2024-11-12 13:27:49 +00:00
docgalaxyblock	4e44d57bf7	fix: missing stable-debug tag (#2232) ... Fixes #2171	2024-11-11 06:06:44 +00:00
Philip Henning	0089ceaf1d	Feature tvos documentation (#2226) ... * Add usage documentation for tvOS * lint and format * Change admonition to mkdocs flavoured style * fix typos * Update hscontrol/templates/apple.go Co-authored-by: Kristoffer Dalby <kristoffer@dalby.cc> * change outer quoting for where quoting in-text is used --------- Co-authored-by: Kristoffer Dalby <kristoffer@dalby.cc>	2024-11-07 14:56:18 +00:00