You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/feature
Andrew Dunham bcceef3682 cmd/tailscale/cli: allow fetching keys from AWS Parameter Store
This allows fetching auth keys, OAuth client secrets, and ID tokens (for
workload identity federation) from AWS Parameter Store by passing an ARN
as the value. This is a relatively low-overhead mechanism for fetching
these values from an external secret store without needing to run a
secret service.

Usage examples:

    # Auth key
    tailscale up \
      --auth-key=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/auth-key

    # OAuth client secret
    tailscale up \
      --client-secret=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/oauth-secret \
      --advertise-tags=tag:server

    # ID token (for workload identity federation)
    tailscale up \
      --client-id=my-client \
      --id-token=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/id-token \
      --advertise-tags=tag:server

Updates tailscale/corp#28792

Signed-off-by: Andrew Dunham <andrew@tailscale.com>
9 hours ago
..
ace all: remove AUTHORS file and references to it 6 days ago
appconnectors all: remove AUTHORS file and references to it 6 days ago
awsparamstore cmd/tailscale/cli: allow fetching keys from AWS Parameter Store 9 hours ago
buildfeatures all: remove AUTHORS file and references to it 6 days ago
c2n all: remove AUTHORS file and references to it 6 days ago
capture all: remove AUTHORS file and references to it 6 days ago
clientupdate all: remove AUTHORS file and references to it 6 days ago
condlite/expvar all: remove AUTHORS file and references to it 6 days ago
condregister cmd/tailscale/cli: allow fetching keys from AWS Parameter Store 9 hours ago
conn25 all: remove AUTHORS file and references to it 6 days ago
debugportmapper all: remove AUTHORS file and references to it 6 days ago
doctor all: remove AUTHORS file and references to it 6 days ago
drive all: remove AUTHORS file and references to it 6 days ago
featuretags all: remove AUTHORS file and references to it 6 days ago
identityfederation all: remove AUTHORS file and references to it 6 days ago
linkspeed all: remove AUTHORS file and references to it 6 days ago
linuxdnsfight all: remove AUTHORS file and references to it 6 days ago
oauthkey all: remove AUTHORS file and references to it 6 days ago
portlist all: remove AUTHORS file and references to it 6 days ago
portmapper all: remove AUTHORS file and references to it 6 days ago
posture all: remove AUTHORS file and references to it 6 days ago
relayserver all: remove AUTHORS file and references to it 6 days ago
sdnotify all: remove AUTHORS file and references to it 6 days ago
syspolicy all: remove AUTHORS file and references to it 6 days ago
taildrop all: remove AUTHORS file and references to it 6 days ago
tap all: remove AUTHORS file and references to it 6 days ago
tpm all: remove AUTHORS file and references to it 6 days ago
useproxy all: remove AUTHORS file and references to it 6 days ago
wakeonlan all: remove AUTHORS file and references to it 6 days ago
feature.go all: remove AUTHORS file and references to it 6 days ago
hooks.go all: remove AUTHORS file and references to it 6 days ago
sdnotify.go all: remove AUTHORS file and references to it 6 days ago