You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/feature
Andrew Dunham bcceef3682 cmd/tailscale/cli: allow fetching keys from AWS Parameter Store
This allows fetching auth keys, OAuth client secrets, and ID tokens (for
workload identity federation) from AWS Parameter Store by passing an ARN
as the value. This is a relatively low-overhead mechanism for fetching
these values from an external secret store without needing to run a
secret service.

Usage examples:

    # Auth key
    tailscale up \
      --auth-key=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/auth-key

    # OAuth client secret
    tailscale up \
      --client-secret=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/oauth-secret \
      --advertise-tags=tag:server

    # ID token (for workload identity federation)
    tailscale up \
      --client-id=my-client \
      --id-token=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/id-token \
      --advertise-tags=tag:server

Updates tailscale/corp#28792

Signed-off-by: Andrew Dunham <andrew@tailscale.com>
1 day ago
..
ace all: remove AUTHORS file and references to it 1 week ago
appconnectors all: remove AUTHORS file and references to it 1 week ago
awsparamstore cmd/tailscale/cli: allow fetching keys from AWS Parameter Store 1 day ago
buildfeatures all: remove AUTHORS file and references to it 1 week ago
c2n all: remove AUTHORS file and references to it 1 week ago
capture all: remove AUTHORS file and references to it 1 week ago
clientupdate all: remove AUTHORS file and references to it 1 week ago
condlite/expvar all: remove AUTHORS file and references to it 1 week ago
condregister cmd/tailscale/cli: allow fetching keys from AWS Parameter Store 1 day ago
conn25 all: remove AUTHORS file and references to it 1 week ago
debugportmapper all: remove AUTHORS file and references to it 1 week ago
doctor all: remove AUTHORS file and references to it 1 week ago
drive all: remove AUTHORS file and references to it 1 week ago
featuretags all: remove AUTHORS file and references to it 1 week ago
identityfederation all: remove AUTHORS file and references to it 1 week ago
linkspeed all: remove AUTHORS file and references to it 1 week ago
linuxdnsfight all: remove AUTHORS file and references to it 1 week ago
oauthkey all: remove AUTHORS file and references to it 1 week ago
portlist all: remove AUTHORS file and references to it 1 week ago
portmapper all: remove AUTHORS file and references to it 1 week ago
posture all: remove AUTHORS file and references to it 1 week ago
relayserver all: remove AUTHORS file and references to it 1 week ago
sdnotify all: remove AUTHORS file and references to it 1 week ago
syspolicy all: remove AUTHORS file and references to it 1 week ago
taildrop all: remove AUTHORS file and references to it 1 week ago
tap all: remove AUTHORS file and references to it 1 week ago
tpm all: remove AUTHORS file and references to it 1 week ago
useproxy all: remove AUTHORS file and references to it 1 week ago
wakeonlan all: remove AUTHORS file and references to it 1 week ago
feature.go all: remove AUTHORS file and references to it 1 week ago
hooks.go all: remove AUTHORS file and references to it 1 week ago
sdnotify.go all: remove AUTHORS file and references to it 1 week ago