CodeCow/tailscale
1
0
Fork 0
mirror of https://github.com/tailscale/tailscale.git synced 2026-06-03 21:01:54 +08:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity
The easiest, most secure way to use WireGuard and 2FA.
10,155 Commits 1,116 Branches 228 Tags 150 MiB
Go 95.5%
C 1.6%
TypeScript 1%
Shell 0.6%
Swift 0.4%
Other 0.6%
a341eea00b
Go to file
David Bond a341eea00b
k8s-operator,cmd/k8s-operator: define ProxyGroupPolicy CRD (#18614) 
This commit adds a new custom resource definition to the kubernetes
operator named `ProxyGroupPolicy`. This resource is namespace scoped
and is used as an allow list for which `ProxyGroup` resources can be
used within its namespace.

The `spec` contains two fields, `ingress` and `egress`. These should
contain the names of `ProxyGroup` resources to denote which can be
used as values in the `tailscale.com/proxy-group` annotation within
`Service` and `Ingress` resources.

The intention is for these policies to be merged within a namespace and
produce a `ValidatingAdmissionPolicy` and `ValidatingAdmissionPolicyBinding`
for both ingress and egress that prevents users from using names of
`ProxyGroup` resources in those annotations.

Closes: https://github.com/tailscale/corp/issues/36829

Signed-off-by: David Bond <davidsbond93@gmail.com>
2026-02-13 16:04:34 +00:00
.bencher bencher: add config to suppress failures on benchmark regressions. 2021-10-01 16:16:02 -07:00
.github .github/workflows: bump oss-fuzz builder hash 2026-02-12 14:25:17 -08:00
appc appc,ipn/ipnlocal: Add split DNS entries for conn25 peers 2026-01-26 08:10:38 -08:00
atomicfile all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
chirp all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
client cmd/tailscale: add event bus queue depth debugging 2026-02-06 10:46:29 -08:00
clientupdate clientupdate, cmd/tailscale/cli: support updating to release-candidates (#18632) 2026-02-12 14:49:52 -05:00
cmd k8s-operator,cmd/k8s-operator: define ProxyGroupPolicy CRD (#18614) 2026-02-13 16:04:34 +00:00
control control/controlclient: fix canSkipStatus online conditions 2026-02-06 10:20:48 -08:00
derp all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
disco all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
docs all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
doctor all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
drive all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
envknob all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
feature cmd/tailscale,feature/featuretags: make webbrowser and colorable deps omittable 2026-02-08 10:04:04 -08:00
gokrazy all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
health all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
hostinfo hostinfo: retrieve OS version for Macs running the OSS client 2026-01-27 15:51:07 +00:00
internal cmd/tailscale/cli: allow fetching keys from AWS Parameter Store 2026-01-29 18:09:56 -05:00
ipn ipn/ipnlocal: log traffic steering scores and suggested exit nodes (#18681) 2026-02-10 18:14:32 -08:00
jsondb all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
k8s-operator k8s-operator,cmd/k8s-operator: define ProxyGroupPolicy CRD (#18614) 2026-02-13 16:04:34 +00:00
kube all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
licenses licenses: update license notices 2026-02-10 17:16:07 -08:00
log all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
logpolicy all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
logtail logtail/filch: fix filch test panic (#18660) 2026-02-10 13:24:00 -08:00
maths all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
metrics all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
net tstun: add test for intercept ordering 2026-02-11 16:48:19 -05:00
omit all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
packages/deb all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
paths all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
portlist portlist: also tb.Skip benchmarks (not just tests) on bad Linux kernels 2026-02-12 13:19:09 -08:00
posture all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
prober prober: export a metric with the number of in-flight probes 2026-02-11 14:25:15 +00:00
proxymap all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
release all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
safesocket all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
safeweb all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
scripts all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
sessionrecording all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
ssh/tailssh .github/workflows: add macos runner 2026-02-09 15:09:19 -08:00
syncs all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
tailcfg tailcfg: add peerRelay bool to hostinfo 2026-02-06 18:25:40 -07:00
tempfork feature/c2n: move answerC2N code + deps out of control/controlclient 2025-10-04 13:16:49 -07:00
tka all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
tool tool/gocross: replace use of Start-Process -Wait flag with WaitForExit 2026-02-09 16:25:55 -07:00
tsconsensus all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
tsconst all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
tsd wgengine/netstack: add local tailscale service IPs to route and terminate locally (#18461) 2026-01-30 16:46:03 -05:00
tsnet testcontrol: send updates for new DNS records or app capabilities 2026-02-11 11:49:15 -07:00
tstest testcontrol: send updates for new DNS records or app capabilities 2026-02-11 11:49:15 -07:00
tstime all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
tsweb tsweb/varz: remove unnecessary Map.Init() calls in tests 2026-02-06 18:35:30 +00:00
types ipn/ipnlocal/netmapcache: add a package to split and cache network maps (#18497) 2026-01-26 14:55:30 -08:00
util net/dns,ipn/ipnlocal: add nodecap to resolve subdomains (#18258) 2026-01-30 13:32:34 -05:00
version all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
wf wf: allow limited broadcast to/from permitted interfaces when using an exit node on Windows 2026-01-23 18:30:38 -06:00
wgengine magicsock, ipnlocal: revert eventbus-based node/filter updates, remove Synchronize hack 2026-02-10 07:32:05 -08:00
wif all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
words all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
.gitattributes .: add .gitattributes entry to use Go hunk-header driver 2021-12-03 17:56:02 -08:00
.gitignore Add .stignore for syncthing (#18540) 2026-01-27 16:15:17 -08:00
.golangci.yml .github: Bump golangci/golangci-lint-action from 6.5.0 to 7.0.0 (#15476) 2025-04-14 16:04:36 -06:00
.stignore Add .stignore for syncthing (#18540) 2026-01-27 16:15:17 -08:00
ALPINE.txt docker: bump alpine v3.19 -> 3.22 (#17155) 2025-09-17 20:22:24 +01:00
api.md {api.md,publicapi}: remove old API docs (#13468) 2024-09-13 14:10:33 -06:00
assert_ts_toolchain_match.go cmd/printdep: add --next flag to use rc Go build hash instead 2026-01-27 14:49:56 -08:00
build_dist.sh build_dist.sh: keep --extra-small making a usable build, add --min 2025-10-06 21:15:25 -07:00
build_docker.sh build_docker.sh: support including extra files (#17405) 2025-10-02 13:29:03 +01:00
CODE_OF_CONDUCT.md CODE_OF_CONDUCT.md: update code of conduct 2025-10-28 08:58:00 -07:00
CODEOWNERS CODEOWNERS: add the start of an owners file 2023-08-16 15:57:29 -07:00
Dockerfile all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
Dockerfile.base all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
flake.lock .github/Makefile/flake: update nix flake support (#16636) 2025-08-19 10:46:07 -04:00
flake.nix go.mod: update bart dep to v0.26.1 (#18659) 2026-02-09 13:24:25 -08:00
go.mod go.mod: update bart dep to v0.26.1 (#18659) 2026-02-09 13:24:25 -08:00
go.mod.sri go.mod: update bart dep to v0.26.1 (#18659) 2026-02-09 13:24:25 -08:00
go.sum go.mod: update bart dep to v0.26.1 (#18659) 2026-02-09 13:24:25 -08:00
go.toolchain.branch go.toolchain.branch: bump to go1.25 (#16954) 2025-08-26 07:44:26 -07:00
go.toolchain.next.branch tool/gocross, pull-toolchain.sh: support a "next" Go toolchain 2026-01-27 14:07:35 -08:00
go.toolchain.next.rev go.toolchain.next.rev: update to final Go 1.26.0 [next] 2026-02-10 20:44:30 -08:00
go.toolchain.rev go.toolchain.{rev,next.rev}: update to Go 1.25.7 / Go 1.26rc3 (#18633) 2026-02-06 12:54:11 -08:00
go.toolchain.rev.sri go.toolchain.{rev,next.rev}: update to Go 1.25.7 / Go 1.26rc3 (#18633) 2026-02-06 12:54:11 -08:00
go.toolchain.version go.toolchain.{rev,next.rev}: update to Go 1.25.7 / Go 1.26rc3 (#18633) 2026-02-06 12:54:11 -08:00
gomod_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
header.txt all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
LICENSE all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
license_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
Makefile Makefile, cmd/*/depaware.txt: split out vendor packages explicitly 2025-10-01 13:02:06 -07:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
pkgdoc_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
pull-toolchain.sh go.toolchain.{rev,next.rev}: update to Go 1.25.7 / Go 1.26rc3 (#18633) 2026-02-06 12:54:11 -08:00
README.md README: update the version of Go in the README 2025-09-29 22:09:25 +01:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix go.mod: update bart dep to v0.26.1 (#18659) 2026-02-09 13:24:25 -08:00
staticcheck.conf all: cleanup unused code, part 2 (#10670) 2023-12-21 17:40:03 -08:00
update-flake.sh flake.nix: update Nix to use tailscale/go 1.25.2 (#17500) 2025-10-08 14:37:47 -04:00
version_tailscale_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
version_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
version-embed.go cmd/printdep: add --next flag to use rc Go build hash instead 2026-01-27 14:49:56 -08:00
VERSION.txt VERSION.txt: this is v1.95.0 (#18414) 2026-01-14 14:19:17 -08:00

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.25. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See commit-messages.md (or skim git log) for our commit message style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

Legal

WireGuard is a registered trademark of Jason A. Donenfeld.