Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tailscale_tailnet_key resource expires in terraform at the same time that the key expires in tailscale. #465

Open
rowanmoul opened this issue Dec 16, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@rowanmoul
Copy link

Describe the bug
A clear and concise description of what the bug is.

The tailscale_tailnet_key resource expires in terraform at the same time that the key becomes invalid for use in the tailnet. On the surface this would seem to make sense, but it means terraform will not automatically re-generate the key prior to it's expiry, which can cause down time for nodes relying on the key.

To Reproduce
Steps to reproduce the behaviour:

  1. Create a tailscale_tailnet_key with terraform (set a short expiry for the sake of testing)
  2. Observe that terraform apply will not prompt to re-create the key until after expiry, at which point the key also becomes invalid on the tailnet.

Expected behaviour
A clear and concise description of what you expected to happen.

terraform apply should trigger the re-generation of the key if it is within some fraction of the exprity time. Alternatively, there should be a configuration setting to specify how long before expiry the terraform resource should become invalid.

Desktop (please complete the following information):

  • OS: Linux
  • Terraform Version: 1.10.2
  • Provider Version: 0.17.2

Additional context
Add any other context about the problem here.

Calling this a bug might be a stretch, but this really does have the potential to cause down time (as it has in my company's setup).

@rowanmoul rowanmoul added the bug Something isn't working label Dec 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant