Change the default matrix test to use an OAuth client which has the new
set of more granular minimal OAuth scopes necessary to successfully use
the action.
Add a new job that uses the previous OAuth client to ensure that we
don't break legacy clients.
Fixes https://github.com/tailscale/github-action/issues/184
Signed-off-by: Mario Minardi <mario@tailscale.com>
Add the `--unattended` flag when running the action on windows-based
machines. This allows the action to properly connect on windows machines
that do not have full GUI support under the hood (e.g., for the current
batch of `windows-11-arm` runners).
Fixes https://github.com/tailscale/github-action/issues/180
Signed-off-by: Mario Minardi <mario@tailscale.com>
Remove `.tgz` and `.msi` files after they have been downloaded. This was
the behaviour of the action previous to `v3.2.0`, but our logic for
caching removed the deletion of these files.
Can look at downloading these to temp folders to avoid the more complex
logic here as a follow up, but this should unblock / fix the immediate
regression.
Also, on Windows, write `tailscale.log` to the temp dir.
Also, on MacOS, delete the `tailscale` directory that was used to build the `tailscale(d)` commands.
Updates: #170
Co-authored-by: Mario Minardi <mario@tailscale.com>
Signed-off-by: Percy Wegmann <percy@tailscale.com>
Checking for hello is not the best way to verify that Tailscale is connected, and it recently broke because we stopped giving ephemeral nodes access to hello.
Instead, check for connection by parsing the status output as recommended in our KB article https://tailscale.com/kb/1073/hello
If package or SHA download from pkgs.tailscale.com fails with a non-200
repsonse code, make the whole action fail. This catches things like
incorrect versions.
Updates #118
We periodically have reports of failures in the GitHub Action
where there has been no recent change in Tailscale infrastructure
and no indication of a problem in metrics or monitoring.
Right now we have to generate a pull request to get this test
workflow to run. Allow it to be run manually whenever desired.
Signed-off-by: Denton Gentry <dgentry@tailscale.com>