- Manage tail8d86e.ts.net ACLs, tags, and DNS via Pulumi + Python - State stored in Pulumi Cloud (free tier) to avoid circular dependency - OAuth authentication via 1Password for secure credential management - mise tasks: tailnet-preview, tailnet-up Two-layer approach: - Layer 1 (Pulumi): Tailnet-wide config (ACLs, tags, DNS) - Layer 2 (Ansible): Node-local tailscale serve config (unchanged) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| .gitignore | ||
| __main__.py | ||
| policy.hujson | ||
| Pulumi.tail8d86e.yaml | ||
| Pulumi.yaml | ||
| pyproject.toml | ||