tailscale / tailscale/tailscale
FR: Tailnet lock support with workload identity federation
Open
fr
needs-triage
tailnet-lock
- Dominant language
- Go
- Stars
- 36.5k
- Forks
- 3.2k
- Avg merge
- 1d 23h
- Merged PRs (30d)
- 132
Description
### What are you trying to do?
It's possible to `tailscale lock sign` a key in advance and it can be given to machines to join the network. This doesn't currently seem possible to manage similarly with workload identity auth.
### How should we solve this?
_No response_
### What is the impact of not solving this?
A tailnet with lock enabled can't use workload identity federation and is stuck with auth keys.
### Anything else?
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.