Update docs to reflect OAuth client credentials may be used instead of an API key

[passcod]

Hello!

• Vote on this issue by adding a 👍 reaction
• If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

Tailscale now supports (in beta) OAuth access which notably doesn't expire, and is tied to the tailnet, not a user. This would stop this provider needing its credentials rotated every 90 days!

Also would permanently solve #93 I think ;)

Affected area/feature

[aq17]

Thanks for the update @passcod ! Adding this to our project backlog.

[passcod]

Hmm, this should be supported already, as support landed in the terraform provider version 0.13.7. Indeed I can see this in the generated pulumi sdk code. So it might just work already, and only need documenting. I'll try it out later this weekend and report back.

[aq17]

@passcod looks like you're correct – I'll change this issue to track updating our docs. Thanks for checking!

[passcod]

Can confirm setting tailscale:oauthClientId and tailscale:oauthClientSecret does work!

[guineveresaenger]

Hi everyone -

looking into this further, it appears that we have a failed release run for v0.12.1: https://github.com/pulumi/pulumi-tailscale/actions/runs/4632658057 which means we don't need to update our docs; we just need to ensure that the publish step succeeds.

[guineveresaenger]

Hi @passcod - many thanks for the tip on OAuth clients 👍
Closing this as completed.