tailscale-policy: prefix per-service tags with svc- because tag names need leading letter #145

New issue

Closed

opened 2026-05-26 19:55:11 +00:00 by coilysiren · 0 comments

coilysiren commented

2026-05-26 19:55:11 +00:00

Owner

Problem

apply on coilysiren/infrastructure#144 was rejected:

tagOwners["tag:2fauth"]: tag names must start with a letter, after 'tag:' (400)

Tailscale tag names need a leading letter after tag:. 2fauth starts with a digit.

Change

Prefix every per-service tag with svc- in both modules:

terraform/tailscale-devices/main.tf - "tag:svc-${each.key}"
terraform/tailscale-policy/main.tf - "tag:svc-${s}"

Bonus: gives a clean namespace alongside tag:host-<host>, and any future service whose name starts with a digit is fine.

Filed by Claude.

**Problem** `apply` on coilysiren/infrastructure#144 was rejected: ``` tagOwners["tag:2fauth"]: tag names must start with a letter, after 'tag:' (400) ``` Tailscale tag names need a leading letter after `tag:`. `2fauth` starts with a digit. **Change** Prefix every per-service tag with `svc-` in both modules: - `terraform/tailscale-devices/main.tf` - `"tag:svc-${each.key}"` - `terraform/tailscale-policy/main.tf` - `"tag:svc-${s}"` Bonus: gives a clean namespace alongside `tag:host-<host>`, and any future service whose name starts with a digit is fine. Filed by Claude.

coilysiren referenced this issue from a commit

2026-05-26 19:55:44 +00:00

fix: prefix per-service tags with svc- to dodge leading-digit reject

coilysiren closed this issue

2026-05-26 19:55:44 +00:00

coilysiren referenced this issue

2026-05-26 20:12:46 +00:00

tailscale-devices: sweep existing sidecars to re-auth with rich tag set #146