tailscale/util/syspolicy
Nick Khyl 740b77df59 ipn/ipnlocal,util/syspolicy: add support for ExitNode.AllowOverride policy setting
When the policy setting is enabled, it allows users to override the exit node enforced by the ExitNodeID
or ExitNodeIP policy. It's primarily intended for use when ExitNodeID is set to auto:any, but it can also
be used with specific exit nodes. It does not allow disabling exit node usage entirely.

Once the exit node policy is overridden, it will not be enforced again until the policy changes,
the user connects or disconnects Tailscale, switches profiles, or disables the override.

Updates tailscale/corp#29969

Signed-off-by: Nick Khyl <nickk@tailscale.com>
2025-07-08 17:17:47 -05:00
..
internal all: unify some redundant testing.TB interface copies 2025-04-08 08:19:29 -07:00
rsop ipn/ipnlocal,util/syspolicy: add support for ExitNode.AllowOverride policy setting 2025-07-08 17:17:47 -05:00
setting all: unify some redundant testing.TB interface copies 2025-04-08 08:19:29 -07:00
source ipn/ipnlocal,util/syspolicy/source: retain existing exit node when using auto exit node, if it's allowed by policy 2025-07-07 15:38:30 -05:00
handler.go all: unify some redundant testing.TB interface copies 2025-04-08 08:19:29 -07:00
policy_keys_test.go util/syspolicy, ipn/ipnlocal: update syspolicy package to utilize syspolicy/rsop 2024-10-25 12:41:07 -05:00
policy_keys.go ipn/ipnlocal,util/syspolicy: add support for ExitNode.AllowOverride policy setting 2025-07-08 17:17:47 -05:00
syspolicy_test.go all: unify some redundant testing.TB interface copies 2025-04-08 08:19:29 -07:00
syspolicy_windows.go all: unify some redundant testing.TB interface copies 2025-04-08 08:19:29 -07:00
syspolicy.go ipn/{ipnauth,ipnlocal,localapi}: make EditPrefs return an error if changing exit node is restricted by policy 2025-07-07 17:18:00 -05:00