Commit graph

149 commits

Author SHA1 Message Date
dependabot[bot]
1cc03b2f9b Bump actions/checkout from 4.2.2 to 6.0.1
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](11bd71901b...8e8c483db8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 08:00:42 -07:00
Mario Minardi
67f81e554b dist: run make build to generated updated index.js
Running make build was missed on #235 and subsequently missed by me
when reviewing that PR (whoops).

Updates #cleanup

Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-12-11 11:09:57 -07:00
Lucino772
fee37da258 fix: use correct arch on macOs 2025-12-11 10:54:47 -07:00
Mario Minardi
bfc6672599 .github/workflows: remove tests for retired macOS 13 runners
Remove tests for macOS-13 based runner images as they are now retired.

Updates #cleanup

Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-12-10 13:40:02 -07:00
Mario Minardi
1ab6ecf072 .github/workflows: skip integration tests for forks
Skip the integration test workflows for forked versions of the repo.

Updates #cleanup

Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-12-10 13:13:40 -07:00
Max Coulombe
dea278bd44
Merge pull request #228 from tailscale/max/clarify-writable-auth_key-scope
README: clarify auth_key scope must be writable
2025-11-10 09:48:04 -05:00
mcoulombe
f987cba5e9 README: clarify auth_key scope must be writable
Fixes #217
Signed-off-by: mcoulombe <max@tailscale.com>
2025-11-10 09:36:35 -05:00
Mario Minardi
a392da0a18
Merge pull request #221 from tailscale/mpminardi/workload-identity
action.yml,src: add support for workload identity federation
2025-10-30 08:07:50 -06:00
Mario Minardi
ef403f0d06
action.yml,src: add support for workload identity federation
Add support for workload identity federation based authentication.

Updates https://github.com/tailscale/corp/issues/31264

Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-10-29 07:51:52 -06:00
Mario Minardi
c8de7faf7a
Merge pull request #220 from tailscale/mpminardi/latest-fix
src: check against platform specific versions for latest and unstable
2025-10-27 09:15:11 -06:00
Mario Minardi
bf5cb7c4d7
src: check against platform specific versions for latest and unstable
Check against platform and package specific version numbers returned
from pkgs.tailscale.com instead of defaulting to "Version" as this can
be incorrect for certain platforms when a release has only been built
for a subset of platforms.

For example. 1.90.2 is available for linux at the time of writing so
"Version" is 1.90.2, but only 1.90.1 is available for windows which
causes an error when using latest as the version specifier on windows
machines.

Fixes https://github.com/tailscale/github-action/issues/219

Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-10-26 18:34:14 -06:00
Mario Minardi
bd97ec6ea8
Merge pull request #218 from tailscale/mpminardi/gitattributes
.gitattributes: mark dist as a generated folder
2025-10-26 18:33:49 -06:00
Mario Minardi
c17f550392
.gitattributes: mark dist as a generated folder
Mark dist as a generated folder so that files within it are collapsed
by default in code review.

Updates #cleanup

Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-10-26 18:00:05 -06:00
Percy Wegmann
3a217367ca validate that when using an OAuth client, tags are specified
Also include a troubleshooting section in the README with information about the
requested tags are invalid or not permitted error.

Updates #78

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-20 14:38:46 -05:00
Mario Minardi
1293ebc018 .github: add dependabot config
Add basic dependabot config to check for actions / npm updates daily.
This mirrors the config we currently have in the terraform provider repo
but with go swapped for npm.

Fixes https://github.com/tailscale/github-action/issues/207

Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-10-20 14:18:35 -05:00
Percy Wegmann
2ddbe90864 stop tailscale service after CI workload finishes
Updates #205

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-20 12:53:03 -05:00
Percy Wegmann
aa604318b6 run all commands silently
To avoid leaking any potentially sensitive information, all commands are now run
without logging to the console. Logging can be enabled by turning on debug logging
as described at https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging.

Updates tailscale/corp#33405

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-15 14:31:02 -05:00
Lee Briggs
b69384a992
Merge pull request #203 from tailscale/secrets
use `setSecret` to mask secrets from logs
2025-10-15 15:03:34 -04:00
Lee Briggs
0edb496506
mask secrets
Signed-off-by: Lee Briggs <lee@leebriggs.co.uk>
2025-10-15 14:59:05 -04:00
Percy Wegmann
ac425ca194 stop echoing tailscale status to console
Updates #201

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 16:46:07 -05:00
Percy Wegmann
2976a889fc miscellaneous cleanup items from upgrading to TypeScript action
Updates tailscale/corp#32821

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
2c45c8a0fd configure DNS on macOS runners
On macOS, `tailscaled` does not manage DNS. Configure it manually in the GitHub action to make
sure MagicDNS name resolution works.

Updates tailscale/corp#32821

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
d4729ea54c miscellaneous cleanup items from upgrading to TypeScript action
Updates tailscale/corp#32821

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
392b48279b fix bugs in ping logic, ping hosts in parallel, and tweak README and LICENSE
The ping logic had some bugs in the wait logic which are now fixed.

Pinging hosts in parallel will speed up CI.

LICENSE and README got small updates in preparation for moving this code
to tailscale/github-action.

Updates tailscale/corp#32862

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
d2d502c92b update documentation and LICENSE to match existing github-action and document new features
Documented new features:

- Logout functionality
- Ping functionality

Also removed speed-comparison CI flow in preparation for replacing the official GitHub
action with this one.

Updates tailscale/corp#32820

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
cff51cdb0c stop pinging hosts as soon as any connectivity is available
Even if we just have DERP connectivity, stop pinging so that action can continue sooner.

Updates tailscale/corp#32862

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
fc77efa75d adjust action parameters based on original tailscale/github-action
`oauth-client-secret` is renamed to `oauth-secret` to match the original action.

Not all of the descriptions matched exactly, but this attempts to take the best from both versions.

Default Tailscale version is updated to 1.88.3.

Updates tailscale/corp#32814

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
75aaac9f12 add support for testing peer connectivity
The new argument `ping` allows users to specify a comma-seperated list
of hosts (IP or hostname) to ping in order to verify connectivity.
Ping is considered successful as soon as the peer is reachable either
directly or via DERP.

Updates tailscale/corp#32817

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
90629cdeb4 factor out commonly repeated constants
Updates tailscale/corp#31655

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
cf94bd9cf6 support "unstable" version option on all platforms except macOS
The tailscale repo does not get tagged for unstable builds, so the best we can do when
building macOS from source is to build from the HEAD of `main`.

Updates tailscale/corp#32813

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
660d7be521 CI: check that code has been formatted and dist built
Updates tailscale/corp#32815

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
39ac0a5882 add dependency on prettier and apply autoformatting
Updates tailscale/corp#30483

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
391d5e0792 get tests running in new repo
- Use secrets from the new repo
- Build MacOS from source

Updates tailscale/corp#31655

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Lee Briggs
ed8cd4e9bf check status
Signed-off-by: Lee Briggs <lee@leebriggs.co.uk>
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Lee Briggs
b9a346ef11 change name
Signed-off-by: Lee Briggs <lee@leebriggs.co.uk>
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Lee Briggs
992dc80701 move speed test into its own workflow
Signed-off-by: Lee Briggs <lee@leebriggs.co.uk>
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Lee Briggs
ea786a8afe update performance claims
Signed-off-by: Lee Briggs <lee@leebriggs.co.uk>
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Lee Briggs
ece0596be3 initial commit
Signed-off-by: Lee Briggs <lee@leebriggs.co.uk>
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
540ac650e6 delete original implementation of GitHub action
This is in preparation for cherry-picking the new typescript implementation from
https://github.com/tailscale/action-setup-tailscale.

Updates tailscale/corp#32821

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-10-14 13:12:31 -05:00
Percy Wegmann
7bdbdbb519 action.yml: bump tailscale version to 1.88.3
Signed-off-by: Percy Wegmann <percy@tailscale.com>
2025-09-29 14:09:53 -05:00
Mario Minardi
1db1f8e300
Merge pull request #197 from tailscale/mpminardi/document-unstable
README.md: document ability to specify unstable for version
2025-09-25 09:58:49 -06:00
Mario Minardi
a8723264f7
README.md: document ability to specify unstable for version
Doucment that "unstable" is now a valid input for version.

Updates #cleanup

Signed-off-by: Mario Minardi <mario@tailscale.com>
2025-09-25 09:55:07 -06:00
Max Coulombe
6cae46e2d7
Merge pull request #195 from tailscale/max/test-target-connectivity-check
Added argument to test targets connectivity
2025-09-25 11:43:46 -04:00
Max Coulombe
2208a5a58b
Update action.yml
Co-authored-by: Mario Minardi <mario@tailscale.com>
2025-09-25 11:40:17 -04:00
mcoulombe
3eef1cc07c + added argument to test target connectivity
Update action.yml

Co-authored-by: Mario Minardi <mario@tailscale.com>
2025-09-25 10:25:14 -04:00
Max Coulombe
0263d9e6d7
Merge pull request #196 from tailscale/max/sanitize-hostnames
action: auto-sanitize default or error on invalid user-defined hostname
2025-09-23 15:36:50 -04:00
mcoulombe
dc4930bf38 action: auto-sanitize default or error on invalid user-defined hostname
Fixes #192
2025-09-23 15:02:42 -04:00
Mario Minardi
6d2f2497d7
Merge pull request #189 from zchee/version-unstable
Support `unstable` version alias
2025-09-12 08:47:56 -06:00
Koichi Shiraishi
59c4d74575
Fix inputs.version.description
Signed-off-by: Koichi Shiraishi <zchee.io@gmail.com>
2025-08-24 01:30:24 +09:00
Koichi Shiraishi
c7fc043ee0
Support unstable version alias
Signed-off-by: Koichi Shiraishi <zchee.io@gmail.com>
2025-08-24 01:13:42 +09:00