Even if we just have DERP connectivity, stop pinging so that action can continue sooner.
Updates tailscale/corp#32862
Signed-off-by: Percy Wegmann <percy@tailscale.com>
`oauth-client-secret` is renamed to `oauth-secret` to match the original action.
Not all of the descriptions matched exactly, but this attempts to take the best from both versions.
Default Tailscale version is updated to 1.88.3.
Updates tailscale/corp#32814
Signed-off-by: Percy Wegmann <percy@tailscale.com>
The new argument `ping` allows users to specify a comma-seperated list
of hosts (IP or hostname) to ping in order to verify connectivity.
Ping is considered successful as soon as the peer is reachable either
directly or via DERP.
Updates tailscale/corp#32817
Signed-off-by: Percy Wegmann <percy@tailscale.com>
The tailscale repo does not get tagged for unstable builds, so the best we can do when
building macOS from source is to build from the HEAD of `main`.
Updates tailscale/corp#32813
Signed-off-by: Percy Wegmann <percy@tailscale.com>
Change the default matrix test to use an OAuth client which has the new
set of more granular minimal OAuth scopes necessary to successfully use
the action.
Add a new job that uses the previous OAuth client to ensure that we
don't break legacy clients.
Fixes https://github.com/tailscale/github-action/issues/184
Signed-off-by: Mario Minardi <mario@tailscale.com>
Add the `--unattended` flag when running the action on windows-based
machines. This allows the action to properly connect on windows machines
that do not have full GUI support under the hood (e.g., for the current
batch of `windows-11-arm` runners).
Fixes https://github.com/tailscale/github-action/issues/180
Signed-off-by: Mario Minardi <mario@tailscale.com>
Remove `.tgz` and `.msi` files after they have been downloaded. This was
the behaviour of the action previous to `v3.2.0`, but our logic for
caching removed the deletion of these files.
Can look at downloading these to temp folders to avoid the more complex
logic here as a follow up, but this should unblock / fix the immediate
regression.
Also, on Windows, write `tailscale.log` to the temp dir.
Also, on MacOS, delete the `tailscale` directory that was used to build the `tailscale(d)` commands.
Updates: #170
Co-authored-by: Mario Minardi <mario@tailscale.com>
Signed-off-by: Percy Wegmann <percy@tailscale.com>
This commit introduces a new `use-cache` input to the Tailscale GitHub Action. When set to `true`, the action will attempt to restore/install Tailscale binaries from a GitHub Actions cache, rather than always downloading or rebuilding them. If the cache is a hit, the download/build steps are
skipped, reducing network flakes and speeding up workflows. The default `false` preserves the
original behavior, ensuring full backward compatibility.
Checking for hello is not the best way to verify that Tailscale is connected, and it recently broke because we stopped giving ephemeral nodes access to hello.
Instead, check for connection by parsing the status output as recommended in our KB article https://tailscale.com/kb/1073/hello
