tailscale-policy: scaffold terraform module + coily verb #136
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Problem
Bootstrap the new
terraform/tailscale-policy/module (scoped sub-task of coilysiren/infrastructure#134). Just the scaffolding - module files, runner script, coily verb. The actualterraform import+applyhappens in a follow-up commit once Kai reviews the planned diff.Change
terraform/tailscale-policy/main.tf-tailscale_acl.policybody (currently a verbatim transcription of the dumped state, so the post-import diff is additive only) +tailscale_device_tags.physicalfor_each overdevices.yaml.terraform/tailscale-policy/devices.yaml- four physical hosts, each withtag:server(preserved),tag:physical, per-host tag.terraform/tailscale-policy/README.md- bootstrap sequence + tag model docs.scripts/k8s/terraform_tailscale_policy.py- standardterraform_runwrapper plus animport-aclaction that runsterraform import tailscale_acl.policy -to adopt current state on first run.Makefile+.coily/coily.yaml- newterraform-tailscale-policyverb.Reuses
tailscale_admin_oauth_env()fromscripts/_lib.py.Next
terraform applylands and the tag assignments are verified in the admin console.terraform/tailscale-devices/to mint keys with per-service + host tags.Filed by Claude.