Commit graph

68 commits

Author SHA1 Message Date
Mario Minardi
ef403f0d06
action.yml,src: add support for workload identity federation
Add support for workload identity federation based authentication.

Updates https://github.com/tailscale/corp/issues/31264

Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-10-29 07:51:52 -06:00
Percy Wegmann
3a217367ca validate that when using an OAuth client, tags are specified
Also include a troubleshooting section in the README with information about the
requested tags are invalid or not permitted error.

Updates #78

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-20 14:38:46 -05:00
Percy Wegmann
d4729ea54c miscellaneous cleanup items from upgrading to TypeScript action
Updates tailscale/corp#32821

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
d2d502c92b update documentation and LICENSE to match existing github-action and document new features
Documented new features:

- Logout functionality
- Ping functionality

Also removed speed-comparison CI flow in preparation for replacing the official GitHub
action with this one.

Updates tailscale/corp#32820

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
fc77efa75d adjust action parameters based on original tailscale/github-action
`oauth-client-secret` is renamed to `oauth-secret` to match the original action.

Not all of the descriptions matched exactly, but this attempts to take the best from both versions.

Default Tailscale version is updated to 1.88.3.

Updates tailscale/corp#32814

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
75aaac9f12 add support for testing peer connectivity
The new argument `ping` allows users to specify a comma-seperated list
of hosts (IP or hostname) to ping in order to verify connectivity.
Ping is considered successful as soon as the peer is reachable either
directly or via DERP.

Updates tailscale/corp#32817

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Lee Briggs
b9a346ef11 change name
Signed-off-by: Lee Briggs <lee@leebriggs.co.uk>
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Lee Briggs
ece0596be3 initial commit
Signed-off-by: Lee Briggs <lee@leebriggs.co.uk>
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
540ac650e6 delete original implementation of GitHub action
This is in preparation for cherry-picking the new typescript implementation from
https://github.com/tailscale/action-setup-tailscale.

Updates tailscale/corp#32821

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
7bdbdbb519 action.yml: bump tailscale version to 1.88.3
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-09-29 14:09:53 -05:00
Max Coulombe
2208a5a58b
Update action.yml
Co-authored-by: Mario Minardi <mario@tailscale.com>
2025-09-25 11:40:17 -04:00
mcoulombe
3eef1cc07c + added argument to test target connectivity
Update action.yml

Co-authored-by: Mario Minardi <mario@tailscale.com>
2025-09-25 10:25:14 -04:00
mcoulombe
dc4930bf38 action: auto-sanitize default or error on invalid user-defined hostname
Fixes #192
2025-09-23 15:02:42 -04:00
Koichi Shiraishi
59c4d74575
Fix inputs.version.description
Signed-off-by: Koichi Shiraishi <zchee.io@gmail.com>
2025-08-24 01:30:24 +09:00
Koichi Shiraishi
c7fc043ee0
Support unstable version alias
Signed-off-by: Koichi Shiraishi <zchee.io@gmail.com>
2025-08-24 01:13:42 +09:00
Mario Minardi
8fe6f78f60
{.github/workflows,action.yml}: run windows in unattended mode
Add the `--unattended` flag when running the action on windows-based
machines. This allows the action to properly connect on windows machines
that do not have full GUI support under the hood (e.g., for the current
batch of `windows-11-arm` runners).

Fixes https://github.com/tailscale/github-action/issues/180

Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-06-23 10:07:15 -06:00
mcoulombe
029c99af76 action: add retry on tailscale up to make the action more reliable
Updates #177
Signed-off-by: mcoulombe <max@tailscale.com>

Co-authored-by: andrea-armstrong

* make retries configurable

* switch to c-style for loop
2025-05-23 17:42:50 -04:00
Mario Minardi
5d536117a7 action.yml: properly remove temporary files after downloading
Remove `.tgz` and `.msi` files after they have been downloaded. This was
the behaviour of the action previous to `v3.2.0`, but our logic for
caching removed the deletion of these files.

Can look at downloading these to temp folders to avoid the more complex
logic here as a follow up, but this should unblock / fix the immediate
regression.

Also, on Windows, write `tailscale.log` to the temp dir.

Also, on MacOS, delete the `tailscale` directory that was used to build the `tailscale(d)` commands.

Updates: #170

Co-authored-by: Mario Minardi <mario@tailscale.com>
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-04-09 16:17:15 -05:00
Whoemoon Jang
7af7df6221
Update Download Tailscale - Windows step not to remove tailscale.msi after installation
Co-authored-by: Mario Minardi <mminardi@shaw.ca>
2025-04-07 09:06:23 +09:00
twelsh-aw
4c25f5bef4 feat: Add optional caching to skip repeated Tailscale downloads and builds
This commit introduces a new `use-cache` input to the Tailscale GitHub Action. When set to `true`, the action will attempt to restore/install Tailscale binaries from a GitHub Actions cache, rather than always downloading or rebuilding them. If the cache is a hit, the download/build steps are
skipped, reducing network flakes and speeding up workflows. The default `false` preserves the
original behavior, ensuring full backward compatibility.
2025-04-05 10:16:16 +09:00
jang whoemoon
d954cb8727 Check sha256 checksum for cache 2025-04-03 14:01:19 +09:00
jang whoemoon
694e85d253 Cache tailscale artifact 2025-04-03 13:30:02 +09:00
kari-ts
b4a7d2da83 action.yml: bump release to 1.82.0
Signed-off-by: kari-ts <kari@tailscale.com>
2025-04-01 11:46:09 -07:00
Mario Minardi
f0c3dac2f5
{action.yml,.github}: add support for macOS
Add support for running the action on macOS-based GitHub runners.

Updates https://github.com/tailscale/github-action/issues/157

Co-authored-by: Derek Gurchik <602444+gurchik@users.noreply.github.com>
2025-03-05 12:35:38 -07:00
Mario Minardi
5dddea1dff
{action.yml,.github}: add support for windows
Add support for running the action on windows-based GitHub runners.

Updates https://github.com/tailscale/github-action/issues/157
2025-03-03 12:37:06 -07:00
Keli Velazquez
aef4d1b9e2 action.yml: bump tailscale version to 1.78.1
Updates tailscale/corp#14315

Signed-off-by: Keli Velazquez <keli@tailscale.com>
2024-12-13 09:26:45 -05:00
Lee Briggs
1ec4a5d914
Merge pull request #131 from jaxxstorm/latest_version
Always pull latest version
2024-12-12 22:33:39 -08:00
Lee Briggs
cb0029737d
use json api for getting latest version 2024-12-12 12:36:42 +00:00
John Vandenberg
16d7e0b781 Force timeout during connection 2024-09-09 15:16:08 -07:00
Andrea Gottardo
57133d573b
Bump Tailscale version to v1.72.1 2024-08-28 11:21:17 -07:00
Anton Tolchanov
b2b96d3c7f action.yml: allow specifying a state directory
Also, document usage of the action with Tailnet Lock.

Fixes #132

Signed-off-by: Anton Tolchanov <anton@tailscale.com>
2024-07-10 08:37:27 -07:00
Lee Briggs
c688cd1540
Revert "don't lookup latest version"
This reverts commit 0eefde4707.
2024-07-07 09:50:18 -07:00
Lee Briggs
0eefde4707
don't lookup latest version
Signed-off-by: Lee Briggs <lee@leebriggs.co.uk>
2024-07-07 09:32:46 -07:00
Lee Briggs
408d716839
don't set default to latest
Signed-off-by: Lee Briggs <lee@leebriggs.co.uk>
2024-07-07 09:30:32 -07:00
Lee Briggs
7af1b1f12d
find latest version
Signed-off-by: Lee Briggs <lee@leebriggs.co.uk>
2024-07-07 09:06:11 -07:00
Patrick O'Doherty
3efa8e1ffc
Bump release to 1.66.3 2024-05-15 13:46:38 -07:00
Patrick O'Doherty
6ecfb8d7e8
Correct default_version 2024-05-15 09:11:42 -07:00
Patrick O'Doherty
9a38686973
action.yml: bump tailscale version to 1.66.1
Signed-off-by: Patrick O'Doherty <patrick@tailscale.com>
2024-05-14 09:45:22 -07:00
Andrew Lytvynov
2075411ebb
Fail if curl gets a non-200 response code (#119)
If package or SHA download from pkgs.tailscale.com fails with a non-200
repsonse code, make the whole action fail. This catches things like
incorrect versions.

Updates #118
2024-04-23 18:20:03 -06:00
Denton Gentry
a5ed86cd49
action.yml: output expected and actual checksum (#92)
Updates https://github.com/tailscale/github-action/issues/89

Signed-off-by: Denton Gentry <dgentry@tailscale.com>
2023-10-04 19:07:50 -07:00
M. J. Fromberger
4e4c49acaa
Ensure curl calls follow redirects. (#85)
Signed-off-by: M. J. Fromberger <fromberger@tailscale.com>
2023-08-25 16:14:10 -07:00
Will Norris
65cdd9a05d add timeout on steps with network I/O
Set a reasonable timeout to prevent jobs from hanging for hours (#50).
5 minutes is way longer than should ever be necessary, but accounts for
intermittent networking issues on either the actions runner or the
Tailscale package or control server.  Users can always set a shorter
timeout on their own action step.

Fixes #50

Signed-off-by: Will Norris <will@tailscale.com>
2023-06-29 11:31:56 -07:00
Dennis Schridde
62fddffa64
Verify SHA256 checksum of downloaded file
Make checksum checking unconditional but fall back to loading the checksum form the internet if not provided

Signed-off-by: Dennis Schridde <dennis@metabase.com>
2023-06-29 09:58:12 -07:00
Denton Gentry
9a2e978652
Support arm64 runners. (#72)
Signed-off-by: Denton Gentry <dgentry@tailscale.com>
2023-06-28 16:51:49 -07:00
Denton Gentry
d7bb41ca42
action.yml: support OAuth clients in addition to authkeys (#71)
Fixes https://github.com/tailscale/github-action/issues/59

Signed-off-by: Denton Gentry <dgentry@tailscale.com>
2023-06-28 16:35:31 -07:00
Dennis Schridde
69556f497e
Allow overriding tailscaled arguments (#64)
Signed-off-by: Dennis Schridde <dennis@metabase.com>
2023-06-28 16:26:19 -07:00
Will Norris
8b804aa882 preserve environment variables when calling sudo
This allows configuring the various aspects of tailscale that use
environment variables (such as OAuth authekeys, amongst others).

Updates #59

Signed-off-by: Will Norris <will@tailscale.com>
2023-05-15 08:23:50 -07:00
Brad Fitzpatrick
7bd8039bf2 Move 'tailscale up' to its own step.
So tailscaled doesn't run with the authkey in its env. It doesn't need
to know, so don't provide it. Defense in depth.

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2023-04-26 15:43:24 -07:00
Lemon
ce41a99162
feat: check runner os and authkey empty (#26) 2022-10-22 18:00:56 -07:00
Adriano
846a867270
Update action.yml (#47)
Bump the default tailscale version used by this action
2022-10-22 17:50:36 -07:00