blumeops/pulumi
Erich Blume 63e99998dd Add Pulumi for tailnet IaC management
- Manage tail8d86e.ts.net ACLs, tags, and DNS via Pulumi + Python
- State stored in Pulumi Cloud (free tier) to avoid circular dependency
- OAuth authentication via 1Password for secure credential management
- mise tasks: tailnet-preview, tailnet-up

Two-layer approach:
- Layer 1 (Pulumi): Tailnet-wide config (ACLs, tags, DNS)
- Layer 2 (Ansible): Node-local tailscale serve config (unchanged)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-15 20:24:28 -08:00
..
.gitignore Add Pulumi for tailnet IaC management 2026-01-15 20:24:28 -08:00
__main__.py Add Pulumi for tailnet IaC management 2026-01-15 20:24:28 -08:00
policy.hujson Add Pulumi for tailnet IaC management 2026-01-15 20:24:28 -08:00
Pulumi.tail8d86e.yaml Add Pulumi for tailnet IaC management 2026-01-15 20:24:28 -08:00
Pulumi.yaml Add Pulumi for tailnet IaC management 2026-01-15 20:24:28 -08:00
pyproject.toml Add Pulumi for tailnet IaC management 2026-01-15 20:24:28 -08:00