search

caius / spacelift-tailscale

Docker image for Spacelift containing Tailscale
Apache License 2.0
1 stars 1 forks source link

Support Tailscale OAuth Client authentication #17

Open caius opened 2 months ago

caius commented 2 months ago

Tailscale Auth Keys expire every 90 days (maximum) which makes it annoying to keep updating the Spacelift context with a new auth key every 3 months. The workaround/solution to this from Tailscale is to implement an OAuth client that can generate a tailscale auth key "just in time" whenever one is needed.

The easy way is probably to use tailscale's get-authkey utility to take in OAuth Token/secret and generate an auth key for spacetail to then consume.

caius commented 2 months ago

Ideally we compile get-authkey at image build time however, not at runtime.