You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/feature/condregister
Andrew Dunham bcceef3682 cmd/tailscale/cli: allow fetching keys from AWS Parameter Store
This allows fetching auth keys, OAuth client secrets, and ID tokens (for
workload identity federation) from AWS Parameter Store by passing an ARN
as the value. This is a relatively low-overhead mechanism for fetching
these values from an external secret store without needing to run a
secret service.

Usage examples:

    # Auth key
    tailscale up \
      --auth-key=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/auth-key

    # OAuth client secret
    tailscale up \
      --client-secret=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/oauth-secret \
      --advertise-tags=tag:server

    # ID token (for workload identity federation)
    tailscale up \
      --client-id=my-client \
      --id-token=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/id-token \
      --advertise-tags=tag:server

Updates tailscale/corp#28792

Signed-off-by: Andrew Dunham <andrew@tailscale.com>
1 day ago
..
awsparamstore cmd/tailscale/cli: allow fetching keys from AWS Parameter Store 1 day ago
identityfederation all: remove AUTHORS file and references to it 1 week ago
oauthkey all: remove AUTHORS file and references to it 1 week ago
portmapper all: remove AUTHORS file and references to it 1 week ago
useproxy all: remove AUTHORS file and references to it 1 week ago
condregister.go all: remove AUTHORS file and references to it 1 week ago
maybe_ace.go all: remove AUTHORS file and references to it 1 week ago
maybe_appconnectors.go all: remove AUTHORS file and references to it 1 week ago
maybe_c2n.go all: remove AUTHORS file and references to it 1 week ago
maybe_capture.go all: remove AUTHORS file and references to it 1 week ago
maybe_clientupdate.go all: remove AUTHORS file and references to it 1 week ago
maybe_conn25.go all: remove AUTHORS file and references to it 1 week ago
maybe_debugportmapper.go all: remove AUTHORS file and references to it 1 week ago
maybe_doctor.go all: remove AUTHORS file and references to it 1 week ago
maybe_drive.go all: remove AUTHORS file and references to it 1 week ago
maybe_linkspeed.go all: remove AUTHORS file and references to it 1 week ago
maybe_linuxdnsfight.go all: remove AUTHORS file and references to it 1 week ago
maybe_osrouter.go all: remove AUTHORS file and references to it 1 week ago
maybe_portlist.go all: remove AUTHORS file and references to it 1 week ago
maybe_posture.go all: remove AUTHORS file and references to it 1 week ago
maybe_relayserver.go all: remove AUTHORS file and references to it 1 week ago
maybe_sdnotify.go all: remove AUTHORS file and references to it 1 week ago
maybe_store_aws.go all: remove AUTHORS file and references to it 1 week ago
maybe_store_kube.go all: remove AUTHORS file and references to it 1 week ago
maybe_syspolicy.go all: remove AUTHORS file and references to it 1 week ago
maybe_taildrop.go all: remove AUTHORS file and references to it 1 week ago
maybe_tap.go all: remove AUTHORS file and references to it 1 week ago
maybe_tpm.go all: remove AUTHORS file and references to it 1 week ago
maybe_wakeonlan.go all: remove AUTHORS file and references to it 1 week ago