tailscale/cmd
Irbe Krumina 8ea90ba80d
cmd/tailscaled,ipn/{ipnlocal,store/kubestore}: don't create attestation keys for stores that are not bound to a node (#18322)
Ensure that hardware attestation keys are not added to tailscaled
state stores that are Kubernetes Secrets or AWS SSM as those Tailscale
devices should be able to be recreated on different nodes, for example,
when moving Pods between nodes.

Updates tailscale/tailscale#18302

Signed-off-by: Irbe Krumina <irbekrm@gmail.com>
2026-01-06 11:29:46 +00:00
..
addlicense all: fix golangci-lint errors 2025-01-07 13:05:37 -08:00
build-webclient client/web: precompress assets 2023-12-07 20:57:31 -05:00
checkmetrics cmd/checkmetrics: add command for checking metrics against kb 2024-12-02 10:30:46 +01:00
cigocacher .github,cmd/cigocacher: add flags --version --stats --cigocached-host 2025-12-15 13:17:03 +00:00
cloner cmd/cloner: support cloning arbitrarily-nested maps 2025-11-13 14:04:47 -05:00
connector-gen cmd/connector-gen: add helper tool for wide app connector configurations 2023-12-15 09:29:42 -08:00
containerboot cmd/containerboot: support egress to Tailscale Service FQDNs (#17493) 2025-12-18 17:06:42 +00:00
derper cmd/derper: add --acme-email flag for GCP cert mode (#18278) 2025-12-25 01:57:11 -05:00
derpprobe cmd/derpprobe,prober: add run all probes handler (#16875) 2025-08-16 09:42:25 -04:00
dist {cmd/dist,release/dist}: add support for intermediary QNAP signing certificates 2025-08-15 16:27:46 -05:00
featuretags feature/featuretags,cmd/omitsize: support feature dependencies 2025-09-19 07:04:57 -07:00
get-authkey cmd,tsnet,internal/client: create internal shim to deprecated control plane API 2025-02-18 10:23:04 -06:00
gitops-pusher scripts/check_license_headers.sh: delete, rewrite as a Go test 2025-06-16 13:35:38 -07:00
hello cmd/hello: display native ipv4 (#15191) 2025-03-04 08:47:35 -07:00
jsonimports cmd/jsonimports: add static analyzer for consistent "json" imports (#17669) 2025-10-28 14:48:02 -07:00
k8s-nameserver k8s-operator: add IPv6 support for DNS records (#16691) 2025-09-25 11:26:43 -04:00
k8s-operator cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252) 2025-12-19 15:59:26 +00:00
k8s-proxy all: rename variables with lowercase-l/uppercase-I 2025-11-18 09:12:34 +00:00
mkmanifest cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS 2023-03-01 15:45:12 -07:00
mkpkg go.mod: upgrade nfpm to v2 (#8786) 2023-08-03 13:00:45 -07:00
mkversion version/mkversion: open-source version generation logic 2023-02-18 05:21:05 +00:00
nardump cmd/nardump: support symlinks, add basic test 2025-04-07 19:24:51 -07:00
natc all: rename variables with lowercase-l/uppercase-I 2025-11-18 09:12:34 +00:00
netlogfmt cmd/netlogfmt: allow empty --resolve-addrs flag (#18103) 2025-12-02 09:08:48 -08:00
nginx-auth tailcfg,all: add and use Node.IsTagged() 2023-03-13 08:44:25 -07:00
omitsize feature/featuretags,cmd/omitsize: support feature dependencies 2025-09-19 07:04:57 -07:00
pgproxy all: use new LocalAPI client package location 2025-02-05 14:41:42 -08:00
printdep cmd/printdep: print correct toolchain URL 2023-02-11 17:57:36 +00:00
proxy-test-server net/tlsdial: fix TLS cert validation of HTTPS proxies 2025-06-18 14:20:39 -07:00
proxy-to-grafana scripts/check_license_headers.sh: delete, rewrite as a Go test 2025-06-16 13:35:38 -07:00
sniproxy all: rename variables with lowercase-l/uppercase-I 2025-11-18 09:12:34 +00:00
speedtest all: update copyright and license headers 2023-01-27 15:36:29 -08:00
ssh-auth-none-demo ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh 2025-01-31 16:36:39 -06:00
stunc cmd/stunc: enforce read timeout deadline (#14309) 2024-12-06 14:27:52 -05:00
stund cmd/cigocacher,go.mod: add cigocacher cmd 2025-11-24 21:15:46 +00:00
stunstamp all: rename variables with lowercase-l/uppercase-I 2025-11-18 09:12:34 +00:00
sync-containers all: rename variables with lowercase-l/uppercase-I 2025-11-18 09:12:34 +00:00
systray client/systray: allow specifying tailscaled socket 2025-08-05 09:19:49 -07:00
tailscale cmd/tailscale/cli: document why there's no --force-reauth on login 2025-12-22 14:58:30 +00:00
tailscaled cmd/tailscaled,ipn/{ipnlocal,store/kubestore}: don't create attestation keys for stores that are not bound to a node (#18322) 2026-01-06 11:29:46 +00:00
testcontrol all: use Go 1.22 range-over-int 2024-04-16 15:32:38 -07:00
testwrapper cmd/testwrapper/flakytest: use t.Attr annotation on flaky tests 2025-10-06 10:58:48 -07:00
tl-longchain all: rename variables with lowercase-l/uppercase-I 2025-11-18 09:12:34 +00:00
tsconnect types/netmap,*: remove some redundant fields from NetMap 2025-11-18 07:56:10 -08:00
tsidp tsnet: enable node registration via federated identity 2025-12-02 17:47:03 +00:00
tsshd all: update copyright and license headers 2023-01-27 15:36:29 -08:00
tta all: use new LocalAPI client package location 2025-02-05 14:41:42 -08:00
vet tailcfg, control/controlclient: start moving MapResponse.DefaultAutoUpdate to a nodeattr 2025-11-25 10:45:34 -08:00
viewer cmd/{cloner,viewer}: handle maps of views 2025-11-12 22:09:49 -05:00
vnet cmd/vnet: add wsproxy mode 2025-03-29 11:02:42 -07:00
xdpderper tsweb: split promvarz into an optional dependency 2025-03-18 16:57:04 -07:00