You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd/tailscaled
Andrew Dunham bcceef3682 cmd/tailscale/cli: allow fetching keys from AWS Parameter Store
This allows fetching auth keys, OAuth client secrets, and ID tokens (for
workload identity federation) from AWS Parameter Store by passing an ARN
as the value. This is a relatively low-overhead mechanism for fetching
these values from an external secret store without needing to run a
secret service.

Usage examples:

    # Auth key
    tailscale up \
      --auth-key=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/auth-key

    # OAuth client secret
    tailscale up \
      --client-secret=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/oauth-secret \
      --advertise-tags=tag:server

    # ID token (for workload identity federation)
    tailscale up \
      --client-id=my-client \
      --id-token=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/id-token \
      --advertise-tags=tag:server

Updates tailscale/corp#28792

Signed-off-by: Andrew Dunham <andrew@tailscale.com>
22 hours ago
..
childproc all: remove AUTHORS file and references to it 7 days ago
tailscaledhooks all: remove AUTHORS file and references to it 7 days ago
debug.go all: remove AUTHORS file and references to it 7 days ago
debug_forcereflect.go all: remove AUTHORS file and references to it 7 days ago
depaware-min.txt wgengine/magicsock: extract IMDS utilities into a standalone package (#18334) 3 weeks ago
depaware-minbox.txt cmd/tailscale/cli: allow fetching keys from AWS Parameter Store 22 hours ago
depaware.txt net/udprelay: advertise addresses from cloud metadata service (#18368) 2 weeks ago
deps_test.go all: remove AUTHORS file and references to it 7 days ago
flag.go all: remove AUTHORS file and references to it 7 days ago
generate.go all: remove AUTHORS file and references to it 7 days ago
install_darwin.go all: remove AUTHORS file and references to it 7 days ago
install_windows.go all: remove AUTHORS file and references to it 7 days ago
manifest_windows_386.syso cmd/{tailscale,tailscaled}: embed manifest into Windows binaries 3 years ago
manifest_windows_amd64.syso cmd/{tailscale,tailscaled}: embed manifest into Windows binaries 3 years ago
manifest_windows_arm64.syso cmd/{tailscale,tailscaled}: embed manifest into Windows binaries 3 years ago
netstack.go all: remove AUTHORS file and references to it 7 days ago
proxy.go all: remove AUTHORS file and references to it 7 days ago
required_version.go all: remove AUTHORS file and references to it 7 days ago
sigpipe.go all: remove AUTHORS file and references to it 7 days ago
ssh.go all: remove AUTHORS file and references to it 7 days ago
tailscaled.defaults cmd/tailscaled: rename relaynode reference in defaults file comment 6 years ago
tailscaled.go all: remove AUTHORS file and references to it 7 days ago
tailscaled.openrc tstest/integration/vms: use an in-process logcatcher (#2360) 5 years ago
tailscaled.service cmd/tailscaled: move cleanup to an implicit action during startup 2 years ago
tailscaled_bird.go all: remove AUTHORS file and references to it 7 days ago
tailscaled_drive.go all: remove AUTHORS file and references to it 7 days ago
tailscaled_notwindows.go all: remove AUTHORS file and references to it 7 days ago
tailscaled_test.go all: remove AUTHORS file and references to it 7 days ago
tailscaled_windows.go all: remove AUTHORS file and references to it 7 days ago
webclient.go all: remove AUTHORS file and references to it 7 days ago
windows-manifest.xml cmd/{tailscale,tailscaled}: embed manifest into Windows binaries 3 years ago
with_cli.go all: remove AUTHORS file and references to it 7 days ago