{"id":18127487,"url":"https://github.com/davidsbond/vault-plugin-tailscale","last_synced_at":"2025-09-17T10:49:40.704Z","repository":{"id":37930508,"uuid":"453551948","full_name":"davidsbond/vault-plugin-tailscale","owner":"davidsbond","description":"A HashiCorp Vault plugin for managing Tailscale authentication keys","archived":false,"fork":false,"pushed_at":"2023-12-18T23:37:00.000Z","size":185,"stargazers_count":81,"open_issues_count":9,"forks_count":5,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-07-22T21:46:20.175Z","etag":null,"topics":["tailscale","vault-plugins"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/davidsbond.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-01-30T00:23:56.000Z","updated_at":"2025-06-24T15:02:52.000Z","dependencies_parsed_at":"2024-06-20T00:14:18.975Z","dependency_job_id":"cd184c0d-d7b4-4843-9a51-5a8d54c744ad","html_url":"https://github.com/davidsbond/vault-plugin-tailscale","commit_stats":null,"previous_names":[],"tags_count":9,"template":false,"template_full_name":null,"purl":"pkg:github/davidsbond/vault-plugin-tailscale","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davidsbond%2Fvault-plugin-tailscale","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davidsbond%2Fvault-plugin-tailscale/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davidsbond%2Fvault-plugin-tailscale/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davidsbond%2Fvault-plugin-tailscale/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/davidsbond","download_url":"https://codeload.github.com/davidsbond/vault-plugin-tailscale/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davidsbond%2Fvault-plugin-tailscale/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":275583367,"owners_count":25490651,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-17T02:00:09.119Z","response_time":84,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["tailscale","vault-plugins"],"created_at":"2024-11-01T09:19:37.970Z","updated_at":"2025-09-17T10:49:40.679Z","avatar_url":"https://github.com/davidsbond.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# vault-plugin-tailscale\n\n[![Go Reference](https://pkg.go.dev/badge/github.com/davidsbond/vault-plugin-tailscale.svg)](https://pkg.go.dev/github.com/davidsbond/vault-plugin-tailscale)\n[![Go Report Card](https://goreportcard.com/badge/github.com/davidsbond/vault-plugin-tailscale)](https://goreportcard.com/report/github.com/davidsbond/vault-plugin-tailscale)\n![Github Actions](https://github.com/davidsbond/vault-plugin-tailscale/actions/workflows/ci.yml/badge.svg?branch=master)\n\nA [HashiCorp Vault](https://www.vaultproject.io/) plugin for generating device authentication keys for \n[Tailscale](https://tailscale.com). Generated keys are single use.\n\n## Installation\n\n1. Download the binary for your architecture from the [releases](https://github.com/davidsbond/vault-plugin-tailscale/releases) page\n2. Generate the SHA256 sum of the plugin binary\n\n```shell\n$ sha256sum vault-plugin-tailscale | cut -d ' ' -f1\nd6ffe79b13326eb472af0b670c694f21f779d524068ad705a672a00f6d433724\n```\n\n3. Add the plugin to your Vault plugin catalog\n\n```shell\n$ vault plugin register -sha256=d6ffe79b13326eb472af0b670c694f21f779d524068ad705a672a00f6d433724 secret vault-plugin-tailscale\nSuccess! Registered plugin: vault-plugin-tailscale\n```\n\n4. Enable the plugin\n\n```shell\n$ vault secrets enable -path=tailscale vault-plugin-tailscale \nSuccess! Enabled the vault-plugin-tailscale secrets engine at: tailscale/\n```\n\n## Usage\n\n1. Obtain an API key from the Tailscale admin dashboard.\n2. Create the Vault configuration for the Tailscale API\n\n```shell\n$ vault write tailscale/config tailnet=$TAILNET api_key=$API_KEY\nSuccess! Data written to: tailscale/config\n```\n\n3. Generate keys using the Vault CLI.\n\n```shell\n$ vault read tailscale/key\nKey          Value\n---          -----\nephemeral    false\nexpires      2022-04-30T00:32:36Z\nid           kMxzN47CNTRL\nkey          secret-key-data\nreusable     false\ntags         \u003cnil\u003e\n```\n\n### Key Options\n\nThe following key/value pairs can be added to the end of the `vault read` command to configure key properties:\n\n#### Tags\n\nTags to apply to the device that uses the authentication key\n\n```\nvault read tailscale/key tags=something:somewhere\n```\n\n#### Preauthorized\n\nIf true, machines added to the tailnet with this key will not required authorization\n\n```\nvault read tailscale/key preauthorized=true\n```\n\n#### Ephemeral\n\nIf true, nodes created with this key will be removed after a period of inactivity or when they disconnect from the Tailnet\n\n```\nvault read tailscale/key ephemeral=true\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdavidsbond%2Fvault-plugin-tailscale","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdavidsbond%2Fvault-plugin-tailscale","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdavidsbond%2Fvault-plugin-tailscale/lists"}