Raj SinghandBrad Fitzpatrick 8eda947530 cmd/derper: add GCP Certificate Manager support (#18161) ...

Add --certmode=gcp for using Google Cloud Certificate Manager's
public CA instead of Let's Encrypt. GCP requires External Account
Binding (EAB) credentials for ACME registration, so this adds
--acme-eab-kid and --acme-eab-key flags.

The EAB key accepts both base64url and standard base64 encoding
to support both ACME spec format and gcloud output.

Fixes tailscale/corp#34881

Signed-off-by: Raj Singh <raj@tailscale.com>
Co-authored-by: Brad Fitzpatrick <bradfitz@tailscale.com>

2025-12-10 04:51:53 +05:30

..

addlicense

all: fix golangci-lint errors

2025-01-07 13:05:37 -08:00

build-webclient

…

checkmetrics

cmd/checkmetrics: add command for checking metrics against kb

2024-12-02 10:30:46 +01:00

cigocacher

.github,cmd/cigocacher: use cigocacher for windows

2025-12-02 09:18:45 +00:00

cloner

cmd/cloner: support cloning arbitrarily-nested maps

2025-11-13 14:04:47 -05:00

connector-gen

…

containerboot

all: rename variables with lowercase-l/uppercase-I

2025-11-18 09:12:34 +00:00

derper

cmd/derper: add GCP Certificate Manager support (#18161)

2025-12-10 04:51:53 +05:30

derpprobe

cmd/derpprobe,prober: add run all probes handler (#16875)

2025-08-16 09:42:25 -04:00

dist

{cmd/dist,release/dist}: add support for intermediary QNAP signing certificates

2025-08-15 16:27:46 -05:00

featuretags

feature/featuretags,cmd/omitsize: support feature dependencies

2025-09-19 07:04:57 -07:00

get-authkey

cmd,tsnet,internal/client: create internal shim to deprecated control plane API

2025-02-18 10:23:04 -06:00

gitops-pusher

scripts/check_license_headers.sh: delete, rewrite as a Go test

2025-06-16 13:35:38 -07:00

hello

cmd/hello: display native ipv4 (#15191)

2025-03-04 08:47:35 -07:00

jsonimports

cmd/jsonimports: add static analyzer for consistent "json" imports (#17669)

2025-10-28 14:48:02 -07:00

k8s-nameserver

k8s-operator: add IPv6 support for DNS records (#16691)

2025-09-25 11:26:43 -04:00

k8s-operator

cmd/k8s-operator: warn if users attempt to expose a headless Service (#18140)

2025-12-08 15:19:28 +00:00

k8s-proxy

all: rename variables with lowercase-l/uppercase-I

2025-11-18 09:12:34 +00:00

mkmanifest

…

mkpkg

…

mkversion

…

nardump

cmd/nardump: support symlinks, add basic test

2025-04-07 19:24:51 -07:00

natc

all: rename variables with lowercase-l/uppercase-I

2025-11-18 09:12:34 +00:00

netlogfmt

cmd/netlogfmt: allow empty --resolve-addrs flag (#18103)

2025-12-02 09:08:48 -08:00

nginx-auth

…

omitsize

feature/featuretags,cmd/omitsize: support feature dependencies

2025-09-19 07:04:57 -07:00

pgproxy

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

printdep

…

proxy-test-server

net/tlsdial: fix TLS cert validation of HTTPS proxies

2025-06-18 14:20:39 -07:00

proxy-to-grafana

scripts/check_license_headers.sh: delete, rewrite as a Go test

2025-06-16 13:35:38 -07:00

sniproxy

all: rename variables with lowercase-l/uppercase-I

2025-11-18 09:12:34 +00:00

speedtest

…

ssh-auth-none-demo

ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh

2025-01-31 16:36:39 -06:00

stunc

cmd/stunc: enforce read timeout deadline (#14309)

2024-12-06 14:27:52 -05:00

stund

cmd/cigocacher,go.mod: add cigocacher cmd

2025-11-24 21:15:46 +00:00

stunstamp

all: rename variables with lowercase-l/uppercase-I

2025-11-18 09:12:34 +00:00

sync-containers

all: rename variables with lowercase-l/uppercase-I

2025-11-18 09:12:34 +00:00

systray

client/systray: allow specifying tailscaled socket

2025-08-05 09:19:49 -07:00

tailscale

cmd/tailscale/cli: stabilise the output of tailscale lock status --json

2025-12-09 09:40:06 +00:00

tailscaled

net/dns: retrample resolve.conf when another process has trampled it (#18069)

2025-12-09 14:55:26 -05:00

testcontrol

all: use Go 1.22 range-over-int

2024-04-16 15:32:38 -07:00

testwrapper

cmd/testwrapper/flakytest: use t.Attr annotation on flaky tests

2025-10-06 10:58:48 -07:00

tl-longchain

all: rename variables with lowercase-l/uppercase-I

2025-11-18 09:12:34 +00:00

tsconnect

types/netmap,*: remove some redundant fields from NetMap

2025-11-18 07:56:10 -08:00

tsidp

tsnet: enable node registration via federated identity

2025-12-02 17:47:03 +00:00

tsshd

…

tta

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

vet

tailcfg, control/controlclient: start moving MapResponse.DefaultAutoUpdate to a nodeattr

2025-11-25 10:45:34 -08:00

viewer

cmd/{cloner,viewer}: handle maps of views

2025-11-12 22:09:49 -05:00

vnet

cmd/vnet: add wsproxy mode

2025-03-29 11:02:42 -07:00

xdpderper

tsweb: split promvarz into an optional dependency

2025-03-18 16:57:04 -07:00