Tailscale Terraform Provider v0.29.0
This release adds support for managing Tailscale Services via the tailscale_service resource and data source. It introduces new authentication features including OIDC identity token support from runtime environments and the ability to read credentials from disk. The provider has migrated to the Terraform plugin framework and tightened validation for the audience argument in federated identity configuration.
v0.29.0 of the Tailscale Terraform Provider has been released with the following changes:
- New: Use the
tailscale_serviceresource andtailscale_servicedata source to manage Tailscale Services. - New: Set
identity_token_environment_variable_namein the provider to specify the environment variable to read an identity token from. This is useful for platforms like HCP Cloud that have well-known environment variable names for the identity token. - New: Obtain an OIDC identity token from the runtime environment by setting
audiencein the provider. This is useful for runtimes like GitHub Actions, AWS via EC2 IMDSv2 or ECS, or GCP via Metadata Server. - New: Read credential related provider argument values from disk by supplying paths prefixed with
file:. - Changed: The provider has migrated from Terraform Plugin SDKv2 to the Terraform plugin framework.
- Changed: The
tailscale_federated_identityresource no longer accepts an empty string ("") for theaudienceargument, to match the server-side validation for it. Omit theaudienceargument or set it to null to let Tailscale generate the audience (recommended), or set it to a non-empty string to specify it yourself.
Source: original entry ↗
More from Tailscale
Follow Tailscale to get its new changes in your feed and email digest.
Self-serve identity provider changes GA
Owner role users can now switch their tailnet's identity provider from the admin console for supported providers, which is now generally available.
Tailscale Kubernetes Operator v1.104.1
The Tailscale Kubernetes Operator v1.104.1 introduces shared Let's Encrypt account keys for ingress ProxyGroups, custom UDP ports for PeerRelay, image pull secrets support in DNSConfig, improved rolling updates for egress ProxyGroups, and fixes for coordination server URL configuration and HA Service cleanup. New Helm chart customization options and security improvements are also included.
Tailscale container image v1.104.1
A new release of the Tailscale container image is available on Docker Hub and GitHub packages repository. This version includes library updates only.