6.9 KiB
6.9 KiB
CHANGELOG
0.16.0 (2022-xx-xx)
Changes
- Headscale fails to serve if the ACL policy file cannot be parsed #537
- Fix labels cardinality error when registering unknown pre-auth key #519
- Fix send on closed channel crash in polling #542
0.15.0 (2022-03-20)
Note: Take a backup of your database before upgrading.
BREAKING
- Boundaries between Namespaces has been removed and all nodes can communicate by default #357
- To limit access between nodes, use ACLs.
/metrics
is now a configurable host:port endpoint: #344. You must update yourconfig.yaml
file to include:metrics_listen_addr: 127.0.0.1:9090
Features
- Add support for writing ACL files with YAML #359
- Users can now use emails in ACL's groups #372
- Add shorthand aliases for commands and subcommands #376
- Add
/windows
endpoint for Windows configuration instructions + registry file download #392 - Added embedded DERP (and STUN) server into Headscale #388
Changes
- Fix a bug were the same IP could be assigned to multiple hosts if joined in quick succession #346
- Simplify the code behind registration of machines #366
- Nodes are now only written to database if they are registrated successfully
- Fix a limitation in the ACLs that prevented users to write rules with
*
as source #374 - Reduce the overhead of marshal/unmarshal for Hostinfo, routes and endpoints by using specific types in Machine #371
- Apply normalization function to FQDN on hostnames when hosts registers and retrieve informations #363
- Fix a bug that prevented the use of
tailscale logout
with OIDC #508 - Added Tailscale repo HEAD and unstable releases channel to the integration tests targets #513
0.14.0 (2022-02-24)
**UPCOMING ### BREAKING
From the **next** version (0.15.0
), all machines will be able to communicate regardless of
if they are in the same namespace. This means that the behaviour currently limited to ACLs
will become default. From version 0.15.0
, all limitation of communications must be done
with ACLs.
This is a part of aligning headscale
's behaviour with Tailscale's upstream behaviour.
BREAKING
- ACLs have been rewritten to align with the bevaviour Tailscale Control Panel provides. NOTE: This is only active if you use ACLs
- Namespaces are now treated as Users
- All machines can communicate with all machines by default
- Tags should now work correctly and adding a host to Headscale should now reload the rules.
- The documentation have a fictional example that should cover some use cases of the ACLs features
Features
Changes
- Remove dependency on CGO (switch from CGO SQLite to pure Go) #346
0.13.0 (2022-02-18):
Features
- Add IPv6 support to the prefix assigned to namespaces
- Add API Key support
- Enable remote control of
headscale
via CLI docs - Enable HTTP API (beta, subject to change)
- Enable remote control of
- OpenID Connect users will be mapped per namespaces
- Each user will get its own namespace, created if it does not exist
oidc.domain_map
option has been removedstrip_email_domain
option has been added (see config-example.yaml)
Changes
ip_prefix
is now superseded byip_prefixes
in the configuration #208- Upgrade
tailscale
(1.20.4) and other dependencies to latest #314 - fix swapped machine<->namespace labels in
/metrics
#312 - remove key-value based update mechanism for namespace changes #316
0.12.4 (2022-01-29):
Changes
- Make gRPC Unix Socket permissions configurable #292
- Trim whitespace before reading Private Key from file #289
- Add new command to generate a private key for
headscale
#290 - Fixed issue where hosts deleted from control server may be written back to the database, as long as they are connected to the control server #278
0.12.3 (2022-01-13)
Changes
0.12.2 (2022-01-11)
Happy New Year!
Changes
0.12.1 (2021-12-24)
(We are skipping 0.12.0 to correct a mishap done weeks ago with the version tagging)
BREAKING
- Upgrade to Tailscale 1.18 #229
- This change requires a new format for private key, private keys are now generated automatically:
- Delete your current key
- Restart
headscale
, a new key will be generated. - Restart all Tailscale clients to fetch the new key
- This change requires a new format for private key, private keys are now generated automatically:
Changes
Features
- Add gRPC and HTTP API (HTTP API is currently disabled) #204
- Use gRPC between the CLI and the server #206, #212
- Beta OpenID Connect support #126, #227
0.11.0 (2021-10-25)
BREAKING
- Make headscale fetch DERP map from URL and file #196