v1.50+ in k8s container is ignoring authentication by API key

[jalberto]

What is the issue?

When update image to latest stable (1.50+) API authentication is ignored, and it wants to authenticate by URL, in 1.48.2 works as expected.

Steps to reproduce

• Use manifests in https://github.com/tailscale/tailscale/blob/main/docs/k8s/
• use the subnet.yaml (+ secrets, roles and SA)
• set TS_AUTH to an API key
• apply the manifest
• in the logs the URL to authentication is printed but the API key is ignored

Are there any recent changes that introduced the issue?

yes, moving stable from 1.48.x to 1.50.x

OS

Linux

OS version

No response

Tailscale version

1.50

Other software

kubernetes

Bug report

No response

[maisem]

The env var for auth key is TS_AUTHKEY and not TS_AUTH. Can you confirm the env var you're using?

[jalberto]

I am using TS_AUTHKEY

On Fri, 13 Oct 2023 at 16:37, Maisem Ali @.***> wrote:

The env var for auth key is TS_AUTHKEY and not TS_AUTH. Can you confirm the env var you're using?

— Reply to this email directly, view it on GitHub https://github.com/tailscale/tailscale/issues/9789#issuecomment-1761629465, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAAYMVYZIIH2VSQMV3QR32LX7FGZPANCNFSM6AAAAAA563VMYA . You are receiving this because you authored the thread.Message ID: @.***>

[DentonGentry]

Possibly resolved by https://github.com/tailscale/tailscale/pull/9814, which is available in the current unstable release and in Dockerhub with tag unstable