baserev update by copy to link target

• Files Changed
• Browse Source

- update to 1.66.4:
  * Fixed: Restored UDP connectivity through Mullvad exit nodes
  * Stateful filtering is now off by default
- update to 1.66.3:
  * Login URLs did not always appear in the console when running tailscale up
  * Starting with v1.66, the Kubernetes operator must always run the same or later version
    as the proxies it manages.
  * Expose cloud services on cluster network to the tailnet, using Kubernetes ExternalName Services
  * Expose tailnet services that use Tailscale HTTPS to cluster workloads
  * Cluster workloads can now refer to Tailscale Ingress resources by their MagicDNS names
  * Configure environment variables for Tailscale Kubernetes operator proxies using ProxyClass CRD
  * Expose tailscaled metrics endpoint for Tailscale Kubernetes operator proxies through ProxyClass CRD
  * Configure labels for the Kubernetes operator Pods with Helm chart values
  * Configure affinity rules for Kubernetes operator proxy Pods with ProxyClass
  * Kubernetes operator proxy init container no longer attempts to enable IPv6 forwarding on systems
    that don't have IPv6 module loaded
  * Tailscale containers running on Kubernetes no longer error if an empty Kubernetes Secret is
    pre-created for the tailscaled state
  * Improved the ambiguous error messages when Tailscale running on Kubernetes does not have the right
    permissions to perform actions against the tailscaled state Secret

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 1.66.1:
  * Resolved issues with nftables rules for stateful filtering,
    introduced in v1.66.0.
  * tailscale set command flags --netfilter-mode, --snat-subnet-routes,
     and --stateful-filtering are added.
- update to 1.66.0:
  * Implemented client-side quarantining for shared-in exit nodes,
    as a mitigation for a security vulnerability described in TS-2024-005.
  * Use the --stateful-filtering flag for the tailscale up to enable stateful filtering for
    subnet routers and exit nodes, as a mitigation for a security vulnerability described
    in TS-2024-005. 
  * Added tab completions
  * Use the tailscale exit-node suggest command to automatically pick an available exit node
    that is likely to perform best.
  * Site-to-site networking now also requires --stateful-filtering=false in addition to
    --snat-subnet-routes=false on new subnet routers. Existing subnet routers with --snat-subnet-routes=false
    will default to --stateful-filtering=false.
- update to 1.64.2:
  * nothing relevant for linux
- update to 1.64.1:
  * nothing relevant for linux
- update to 1.64.0:
  * New: tailscale configure kubeconfig now respects KUBECONFIG environment variable.
  * Fixed: tailscale configure kubeconfig now works with partially empty kubeconfig.
  * Fixed: MSS clamping for Kubernetes operator proxies using nftables.
  * Fixed: Containers on hosts with partial support for ip6tables no longer crash.
- turn of changelog generation
- add completions for bash

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 1.62.1:
  * Send load balancing hint HTTP request header
  * Fixed: Kubernetes operator proxies should not accept subnet routes

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

update to 1.62.0

• Files Changed
• Browse Source

initialized devel package after accepting 1148805

• Files Changed
• Browse Source

Disable auto update

• Files Changed
• Browse Source

change to manualrun

• Files Changed
• Browse Source

Cleanup

• Files Changed
• Browse Source

- update to 1.60.0:
  * minimum go version 1.22
  * authentication: present users with a valid login page when
    attempting to login even after leaving device unattended for several days
  * networking: mute noisy peer mtu discovery errors
  * networking: expose gVisor metrics in debug mode
  * port mapper: support legacy "urn:dslforum-org" port mapping services
  * port mapper: fix crash when no support mapping services found
  * ssh: log warning when unable to find SSH host keys
  * serve: improve error message when running as non-root
  * Detect when Tailscale is running on Digital Ocean and automatically
    use Digital Ocean's DNS resolvers
  * enable app connectors to install routes for domains that resolve to CNAME
    records
  * support pre-configured routes from control server
  * add new read-only mode
  * tailscale status command: fix output formatting Tailnet
    includes location-based exit nodes
  * a new ProxyClass custom resource that allows to provide custom
    configuration for cluster resources that the operator creates
  * ACL tags for the operator can now be configured via Helm chart values
  * routing to Ingress backends that require an exact path without a slash

• Files Changed
• Browse Source

- make rpm not overwrite /etc/default/taiscaled
- defattr everything to root

• Files Changed
• Browse Source

add changes

• Files Changed
• Browse Source

update to 1.58.2 and adjust services

• Files Changed
• Browse Source

update to 1.58.0

• Files Changed
• Browse Source

fix Leap

• Files Changed
• Browse Source

update to 1.56.1

• Files Changed
• Browse Source

fix versioning to what upstream expects

• Files Changed
• Browse Source