tailscale / tailscale

The easiest, most secure way to use WireGuard and 2FA.
https://tailscale.com
BSD 3-Clause "New" or "Revised" License
17.21k stars 1.31k forks source link

Posture-checking only accessible with tailscale set (and not tailscale up) #12154

Open neilschelly opened 3 weeks ago

neilschelly commented 3 weeks ago

What is the issue?

Disclaimer: This may be because Posture Checking is a new feature, maybe still in testing?

Nearly all the options that can be set in tailscale set commands, like accepting/advertising routes can also be set with tailscale up commands to start and enroll a user with the right environment in one shot.

tailscale set --posture-checking=true works, but tailscale up --posture-checking=true does now.

Also, the help output of tailscale set does not list --posture-checking as one of the flags you can configure with it.

Steps to reproduce

$ tailscale up --posture-checking=true
flag provided but not defined: -posture-checking
$ tailscale set
Change specified preferences

USAGE
  tailscale set [flags]

"tailscale set" allows changing specific preferences.

Unlike "tailscale up", this command does not require the complete set of desired settings.

Only settings explicitly mentioned will be set. There are no default values.

FLAGS
  --accept-dns, --accept-dns=false
        accept DNS configuration from the admin panel
<SNIP>

Are there any recent changes that introduced the issue?

No response

OS

Linux

OS version

Debian 12/Bookworm

Tailscale version

1.66.3

Other software

We use posture-checking with Crowdstrike.

Bug report

No response