Tailscale machine plugin: discovery, enrollment, and private server access - #3277
Open
ymichael wants to merge 40 commits into
Open
Tailscale machine plugin: discovery, enrollment, and private server access#3277ymichael wants to merge 40 commits into
ymichael wants to merge 40 commits into
Conversation
ymichael
force-pushed
the
bb/machine-provider-apis
branch
from
September 9, 2026 03:37
6f566e7 to
a8bf1f6
Compare
ymichael
force-pushed
the
bb/machine-plugin-tailscale
branch
from
September 9, 2026 03:55
f26b8ec to
575be3f
Compare
…ne-plugin-tailscale
ymichael
force-pushed
the
bb/machine-provider-apis
branch
2 times, most recently
from
September 9, 2026 21:08
90361e6 to
fec7d7b
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Human comments
What was wrong
Users need to discover and enroll existing tailnet devices and let them reach this server through a verified private endpoint.
What changed
Adds the optional Tailscale machine and server-access integration. Discovers devices through the local Tailscale client, enrolls through ordinary SSH, and validates an existing dedicated HTTPS Serve mapping. It does not mutate Serve, join devices to the tailnet, or allocate cloud compute. Includes plugin-local SSH execution and uninstall helpers; includes plugin-owned CLI, UI, documentation, catalog, and tests.
Split from #3231. Depends directly on #3274 (
bb/machine-provider-apis); the GitHub diff contains this integration only. Retarget to main after the base merges.How you verified
Plugin typecheck/lint/tests, including local SSH execution and uninstall coverage, pass after rebasing onto PR #3274 (
5e1b235a4f), including 33 plugin tests. Source CLI and server/app bundles build. The plugin uses the renamedreconcileCleanupcallback.No live vendor allocation, machine adoption, or Cloud deployment was performed for this split.