Andrew Dunham bcceef3682 cmd/tailscale/cli: allow fetching keys from AWS Parameter Store ...

This allows fetching auth keys, OAuth client secrets, and ID tokens (for
workload identity federation) from AWS Parameter Store by passing an ARN
as the value. This is a relatively low-overhead mechanism for fetching
these values from an external secret store without needing to run a
secret service.

Usage examples:

    # Auth key
    tailscale up \
      --auth-key=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/auth-key

    # OAuth client secret
    tailscale up \
      --client-secret=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/oauth-secret \
      --advertise-tags=tag:server

    # ID token (for workload identity federation)
    tailscale up \
      --client-id=my-client \
      --id-token=arn:aws:ssm:us-east-1:123456789012:parameter/tailscale/id-token \
      --advertise-tags=tag:server

Updates tailscale/corp#28792

Signed-off-by: Andrew Dunham <andrew@tailscale.com>

2026-01-29 18:09:56 -05:00

..

client/tailscale

cmd/tailscale/cli: allow fetching keys from AWS Parameter Store

2026-01-29 18:09:56 -05:00

tooldeps

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00