megachangelog
Feature

Workload identity federation

Workload identity federation (beta) enables creation of federated OIDC workload identities from third-party providers for Tailscale API authentication. Support added across tailscale-client-go-v2, Terraform provider, GitHub Action, and tailscale up command. OAuth client scopes and descriptions are now editable in the Trust credentials page of the admin console.

  • New: Use workload identity federation (beta) for creation of federated OIDC workload identities from third-party providers to authenticate requests to the Tailscale API.
  • New: tailscale-client-go-v2 can use workload identity federation for authentication.
  • New: The Tailscale Terraform provider can use workload identity federation for authentication.
  • New: The Tailscale GitHub Action can use workload identity federation for auth key generation.
  • New: The tailscale up command can use workload identity federation for auth key generation.
  • New: OAuth client scopes and descriptions are editable in the Trust credentials page of the admin console.
  • Changed: The Trust credentials page of the admin console replaces the OAuth clients page.
authapioidcidentityfederationoauth

Source: original entry ↗