pulumi-tailscale 1.0.0a1754635854__tar.gz → 1.0.0a1764138241__tar.gz

{pulumi_tailscale-1.0.0a1754635854 → pulumi_tailscale-1.0.0a1764138241}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulumi_tailscale
-Version: 1.0.0a1754635854
+Version: 1.0.0a1764138241
 Summary: A Pulumi package for creating and managing Tailscale cloud resources.
 License: Apache-2.0
 Project-URL: Homepage, https://pulumi.io

{pulumi_tailscale-1.0.0a1754635854 → pulumi_tailscale-1.0.0a1764138241}/pulumi_tailscale/__init__.py

@@ -13,6 +13,7 @@ from .device_authorization import *
 from .device_key import *
 from .device_subnet_routes import *
 from .device_tags import *
+from .dns_configuration import *
 from .dns_nameservers import *
 from .dns_preferences import *
 from .dns_search_paths import *
@@ -99,6 +100,14 @@ _utilities.register(
    "tailscale:index/deviceTags:DeviceTags": "DeviceTags"
   }
  },
+ {
+  "pkg": "tailscale",
+  "mod": "index/dnsConfiguration",
+  "fqn": "pulumi_tailscale",
+  "classes": {
+   "tailscale:index/dnsConfiguration:DnsConfiguration": "DnsConfiguration"
+  }
+ },
  {
   "pkg": "tailscale",
   "mod": "index/dnsNameservers",

pulumi_tailscale-1.0.0a1764138241/pulumi_tailscale/_inputs.py

@@ -0,0 +1,278 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import builtins as _builtins
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from . import _utilities
+
+__all__ = [
+    'ContactsAccountArgs',
+    'ContactsAccountArgsDict',
+    'ContactsSecurityArgs',
+    'ContactsSecurityArgsDict',
+    'ContactsSupportArgs',
+    'ContactsSupportArgsDict',
+    'DnsConfigurationNameserverArgs',
+    'DnsConfigurationNameserverArgsDict',
+    'DnsConfigurationSplitDnArgs',
+    'DnsConfigurationSplitDnArgsDict',
+    'DnsConfigurationSplitDnNameserverArgs',
+    'DnsConfigurationSplitDnNameserverArgsDict',
+]
+
+MYPY = False
+
+if not MYPY:
+    class ContactsAccountArgsDict(TypedDict):
+        email: pulumi.Input[_builtins.str]
+        """
+        Email address to send communications to
+        """
+elif False:
+    ContactsAccountArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ContactsAccountArgs:
+    def __init__(__self__, *,
+                 email: pulumi.Input[_builtins.str]):
+        """
+        :param pulumi.Input[_builtins.str] email: Email address to send communications to
+        """
+        pulumi.set(__self__, "email", email)
+
+    @_builtins.property
+    @pulumi.getter
+    def email(self) -> pulumi.Input[_builtins.str]:
+        """
+        Email address to send communications to
+        """
+        return pulumi.get(self, "email")
+
+    @email.setter
+    def email(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "email", value)
+
+
+if not MYPY:
+    class ContactsSecurityArgsDict(TypedDict):
+        email: pulumi.Input[_builtins.str]
+        """
+        Email address to send communications to
+        """
+elif False:
+    ContactsSecurityArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ContactsSecurityArgs:
+    def __init__(__self__, *,
+                 email: pulumi.Input[_builtins.str]):
+        """
+        :param pulumi.Input[_builtins.str] email: Email address to send communications to
+        """
+        pulumi.set(__self__, "email", email)
+
+    @_builtins.property
+    @pulumi.getter
+    def email(self) -> pulumi.Input[_builtins.str]:
+        """
+        Email address to send communications to
+        """
+        return pulumi.get(self, "email")
+
+    @email.setter
+    def email(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "email", value)
+
+
+if not MYPY:
+    class ContactsSupportArgsDict(TypedDict):
+        email: pulumi.Input[_builtins.str]
+        """
+        Email address to send communications to
+        """
+elif False:
+    ContactsSupportArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ContactsSupportArgs:
+    def __init__(__self__, *,
+                 email: pulumi.Input[_builtins.str]):
+        """
+        :param pulumi.Input[_builtins.str] email: Email address to send communications to
+        """
+        pulumi.set(__self__, "email", email)
+
+    @_builtins.property
+    @pulumi.getter
+    def email(self) -> pulumi.Input[_builtins.str]:
+        """
+        Email address to send communications to
+        """
+        return pulumi.get(self, "email")
+
+    @email.setter
+    def email(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "email", value)
+
+
+if not MYPY:
+    class DnsConfigurationNameserverArgsDict(TypedDict):
+        address: pulumi.Input[_builtins.str]
+        """
+        The nameserver's IPv4 or IPv6 address
+        """
+        use_with_exit_node: NotRequired[pulumi.Input[_builtins.bool]]
+        """
+        This nameserver will continue to be used when an exit node is selected (requires Tailscale v1.88.1 or later). Defaults to false.
+        """
+elif False:
+    DnsConfigurationNameserverArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class DnsConfigurationNameserverArgs:
+    def __init__(__self__, *,
+                 address: pulumi.Input[_builtins.str],
+                 use_with_exit_node: Optional[pulumi.Input[_builtins.bool]] = None):
+        """
+        :param pulumi.Input[_builtins.str] address: The nameserver's IPv4 or IPv6 address
+        :param pulumi.Input[_builtins.bool] use_with_exit_node: This nameserver will continue to be used when an exit node is selected (requires Tailscale v1.88.1 or later). Defaults to false.
+        """
+        pulumi.set(__self__, "address", address)
+        if use_with_exit_node is not None:
+            pulumi.set(__self__, "use_with_exit_node", use_with_exit_node)
+
+    @_builtins.property
+    @pulumi.getter
+    def address(self) -> pulumi.Input[_builtins.str]:
+        """
+        The nameserver's IPv4 or IPv6 address
+        """
+        return pulumi.get(self, "address")
+
+    @address.setter
+    def address(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "address", value)
+
+    @_builtins.property
+    @pulumi.getter(name="useWithExitNode")
+    def use_with_exit_node(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        This nameserver will continue to be used when an exit node is selected (requires Tailscale v1.88.1 or later). Defaults to false.
+        """
+        return pulumi.get(self, "use_with_exit_node")
+
+    @use_with_exit_node.setter
+    def use_with_exit_node(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "use_with_exit_node", value)
+
+
+if not MYPY:
+    class DnsConfigurationSplitDnArgsDict(TypedDict):
+        domain: pulumi.Input[_builtins.str]
+        """
+        The nameservers will be used only for this domain.
+        """
+        nameservers: pulumi.Input[Sequence[pulumi.Input['DnsConfigurationSplitDnNameserverArgsDict']]]
+        """
+        Set the nameservers used by devices on your network to resolve DNS queries.
+        """
+elif False:
+    DnsConfigurationSplitDnArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class DnsConfigurationSplitDnArgs:
+    def __init__(__self__, *,
+                 domain: pulumi.Input[_builtins.str],
+                 nameservers: pulumi.Input[Sequence[pulumi.Input['DnsConfigurationSplitDnNameserverArgs']]]):
+        """
+        :param pulumi.Input[_builtins.str] domain: The nameservers will be used only for this domain.
+        :param pulumi.Input[Sequence[pulumi.Input['DnsConfigurationSplitDnNameserverArgs']]] nameservers: Set the nameservers used by devices on your network to resolve DNS queries.
+        """
+        pulumi.set(__self__, "domain", domain)
+        pulumi.set(__self__, "nameservers", nameservers)
+
+    @_builtins.property
+    @pulumi.getter
+    def domain(self) -> pulumi.Input[_builtins.str]:
+        """
+        The nameservers will be used only for this domain.
+        """
+        return pulumi.get(self, "domain")
+
+    @domain.setter
+    def domain(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "domain", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def nameservers(self) -> pulumi.Input[Sequence[pulumi.Input['DnsConfigurationSplitDnNameserverArgs']]]:
+        """
+        Set the nameservers used by devices on your network to resolve DNS queries.
+        """
+        return pulumi.get(self, "nameservers")
+
+    @nameservers.setter
+    def nameservers(self, value: pulumi.Input[Sequence[pulumi.Input['DnsConfigurationSplitDnNameserverArgs']]]):
+        pulumi.set(self, "nameservers", value)
+
+
+if not MYPY:
+    class DnsConfigurationSplitDnNameserverArgsDict(TypedDict):
+        address: pulumi.Input[_builtins.str]
+        """
+        The nameserver's IPv4 or IPv6 address.
+        """
+        use_with_exit_node: NotRequired[pulumi.Input[_builtins.bool]]
+        """
+        This nameserver will continue to be used when an exit node is selected (requires Tailscale v1.88.1 or later). Defaults to false.
+        """
+elif False:
+    DnsConfigurationSplitDnNameserverArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class DnsConfigurationSplitDnNameserverArgs:
+    def __init__(__self__, *,
+                 address: pulumi.Input[_builtins.str],
+                 use_with_exit_node: Optional[pulumi.Input[_builtins.bool]] = None):
+        """
+        :param pulumi.Input[_builtins.str] address: The nameserver's IPv4 or IPv6 address.
+        :param pulumi.Input[_builtins.bool] use_with_exit_node: This nameserver will continue to be used when an exit node is selected (requires Tailscale v1.88.1 or later). Defaults to false.
+        """
+        pulumi.set(__self__, "address", address)
+        if use_with_exit_node is not None:
+            pulumi.set(__self__, "use_with_exit_node", use_with_exit_node)
+
+    @_builtins.property
+    @pulumi.getter
+    def address(self) -> pulumi.Input[_builtins.str]:
+        """
+        The nameserver's IPv4 or IPv6 address.
+        """
+        return pulumi.get(self, "address")
+
+    @address.setter
+    def address(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "address", value)
+
+    @_builtins.property
+    @pulumi.getter(name="useWithExitNode")
+    def use_with_exit_node(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        This nameserver will continue to be used when an exit node is selected (requires Tailscale v1.88.1 or later). Defaults to false.
+        """
+        return pulumi.get(self, "use_with_exit_node")
+
+    @use_with_exit_node.setter
+    def use_with_exit_node(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "use_with_exit_node", value)
+
+

{pulumi_tailscale-1.0.0a1754635854 → pulumi_tailscale-1.0.0a1764138241}/pulumi_tailscale/acl.py

@@ -158,12 +158,12 @@ class Acl(pulumi.CustomResource):
         }))
         as_hujson = tailscale.Acl("as_hujson", acl=\"\"\"  {
             // Comments in HuJSON policy are preserved when the policy is applied.
-            "acls": [
+            \\"acls\\": [
               {
                 // Allow all users access to all ports.
-                action = "accept",
-                users  = ["*"],
-                ports  = ["*:*"],
+                action = \\"accept\\",
+                users  = [\\"*\\"],
+                ports  = [\\"*:*\\"],
               },
             ],
           }
@@ -172,6 +172,8 @@ class Acl(pulumi.CustomResource):
 
         ## Import
 
+        The `pulumi import` command can be used, for example:
+
         ID doesn't matter.
 
         ```sh
@@ -211,12 +213,12 @@ class Acl(pulumi.CustomResource):
         }))
         as_hujson = tailscale.Acl("as_hujson", acl=\"\"\"  {
             // Comments in HuJSON policy are preserved when the policy is applied.
-            "acls": [
+            \\"acls\\": [
               {
                 // Allow all users access to all ports.
-                action = "accept",
-                users  = ["*"],
-                ports  = ["*:*"],
+                action = \\"accept\\",
+                users  = [\\"*\\"],
+                ports  = [\\"*:*\\"],
               },
             ],
           }
@@ -225,6 +227,8 @@ class Acl(pulumi.CustomResource):
 
         ## Import
 
+        The `pulumi import` command can be used, for example:
+
         ID doesn't matter.
 
         ```sh

pulumi_tailscale-1.0.0a1764138241/pulumi_tailscale/config/__init__.pyi

@@ -0,0 +1,56 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import builtins as _builtins
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from .. import _utilities
+
+apiKey: Optional[str]
+"""
+The API key to use for authenticating requests to the API. Can be set via the TAILSCALE_API_KEY environment variable. Conflicts with 'oauth_client_id' and 'oauth_client_secret'.
+"""
+
+baseUrl: Optional[str]
+"""
+The base URL of the Tailscale API. Defaults to https://api.tailscale.com. Can be set via the TAILSCALE_BASE_URL environment variable.
+"""
+
+identityToken: Optional[str]
+"""
+The jwt identity token to exchange for a Tailscale API token when using a federated identity client. Can be set via the TAILSCALE_IDENTITY_TOKEN environment variable. Conflicts with 'api_key' and 'oauth_client_secret'.
+"""
+
+oauthClientId: Optional[str]
+"""
+The OAuth application's ID when using OAuth client credentials. Can be set via the TAILSCALE_OAUTH_CLIENT_ID environment variable. Either 'oauth_client_secret' or 'identity_token' must be set alongside 'oauth_client_id'. Conflicts with 'api_key'.
+"""
+
+oauthClientSecret: Optional[str]
+"""
+The OAuth application's secret when using OAuth client credentials. Can be set via the TAILSCALE_OAUTH_CLIENT_SECRET environment variable. Conflicts with 'api_key' and 'identity_token'.
+"""
+
+scopes: Optional[str]
+"""
+The OAuth 2.0 scopes to request when generating the access token using the supplied OAuth client credentials. See https://tailscale.com/kb/1215/oauth-clients/#scopes for available scopes. Only valid when both 'oauth_client_id' and 'oauth_client_secret' are set.
+"""
+
+tailnet: Optional[str]
+"""
+The tailnet ID. Tailnets created before Oct 2025 can still use the legacy ID, but the Tailnet ID is the preferred identifier. Can be set via the TAILSCALE_TAILNET environment variable. Default is the tailnet that owns API credentials passed to the provider.
+"""
+
+userAgent: Optional[str]
+"""
+User-Agent header for API requests.
+"""
+

{pulumi_tailscale-1.0.0a1754635854 → pulumi_tailscale-1.0.0a1764138241}/pulumi_tailscale/config/vars.py

@@ -23,49 +23,49 @@ class _ExportableConfig(types.ModuleType):
     @_builtins.property
     def api_key(self) -> Optional[str]:
         """
-        The API key to use for authenticating requests to the API. Can be set via the TAILSCALE_API_KEY environment variable.
-        Conflicts with 'oauth_client_id' and 'oauth_client_secret'.
+        The API key to use for authenticating requests to the API. Can be set via the TAILSCALE_API_KEY environment variable. Conflicts with 'oauth_client_id' and 'oauth_client_secret'.
         """
         return __config__.get('apiKey')
 
     @_builtins.property
     def base_url(self) -> Optional[str]:
         """
-        The base URL of the Tailscale API. Defaults to https://api.tailscale.com. Can be set via the TAILSCALE_BASE_URL
-        environment variable.
+        The base URL of the Tailscale API. Defaults to https://api.tailscale.com. Can be set via the TAILSCALE_BASE_URL environment variable.
         """
         return __config__.get('baseUrl')
 
+    @_builtins.property
+    def identity_token(self) -> Optional[str]:
+        """
+        The jwt identity token to exchange for a Tailscale API token when using a federated identity client. Can be set via the TAILSCALE_IDENTITY_TOKEN environment variable. Conflicts with 'api_key' and 'oauth_client_secret'.
+        """
+        return __config__.get('identityToken')
+
     @_builtins.property
     def oauth_client_id(self) -> Optional[str]:
         """
-        The OAuth application's ID when using OAuth client credentials. Can be set via the TAILSCALE_OAUTH_CLIENT_ID environment
-        variable. Both 'oauth_client_id' and 'oauth_client_secret' must be set. Conflicts with 'api_key'.
+        The OAuth application's ID when using OAuth client credentials. Can be set via the TAILSCALE_OAUTH_CLIENT_ID environment variable. Either 'oauth_client_secret' or 'identity_token' must be set alongside 'oauth_client_id'. Conflicts with 'api_key'.
         """
         return __config__.get('oauthClientId')
 
     @_builtins.property
     def oauth_client_secret(self) -> Optional[str]:
         """
-        The OAuth application's secret when using OAuth client credentials. Can be set via the TAILSCALE_OAUTH_CLIENT_SECRET
-        environment variable. Both 'oauth_client_id' and 'oauth_client_secret' must be set. Conflicts with 'api_key'.
+        The OAuth application's secret when using OAuth client credentials. Can be set via the TAILSCALE_OAUTH_CLIENT_SECRET environment variable. Conflicts with 'api_key' and 'identity_token'.
         """
         return __config__.get('oauthClientSecret')
 
     @_builtins.property
     def scopes(self) -> Optional[str]:
         """
-        The OAuth 2.0 scopes to request when for the access token generated using the supplied OAuth client credentials. See
-        https://tailscale.com/kb/1215/oauth-clients/#scopes for available scopes. Only valid when both 'oauth_client_id' and
-        'oauth_client_secret' are set.
+        The OAuth 2.0 scopes to request when generating the access token using the supplied OAuth client credentials. See https://tailscale.com/kb/1215/oauth-clients/#scopes for available scopes. Only valid when both 'oauth_client_id' and 'oauth_client_secret' are set.
         """
         return __config__.get('scopes')
 
     @_builtins.property
     def tailnet(self) -> Optional[str]:
         """
-        The organization name of the Tailnet in which to perform actions. Can be set via the TAILSCALE_TAILNET environment
-        variable. Default is the tailnet that owns API credentials passed to the provider.
+        The tailnet ID. Tailnets created before Oct 2025 can still use the legacy ID, but the Tailnet ID is the preferred identifier. Can be set via the TAILSCALE_TAILNET environment variable. Default is the tailnet that owns API credentials passed to the provider.
         """
         return __config__.get('tailnet')
 

{pulumi_tailscale-1.0.0a1754635854 → pulumi_tailscale-1.0.0a1764138241}/pulumi_tailscale/contacts.py

@@ -158,6 +158,8 @@ class Contacts(pulumi.CustomResource):
 
         ## Import
 
+        The `pulumi import` command can be used, for example:
+
         ID doesn't matter.
 
         ```sh
@@ -197,6 +199,8 @@ class Contacts(pulumi.CustomResource):
 
         ## Import
 
+        The `pulumi import` command can be used, for example:
+
         ID doesn't matter.
 
         ```sh

{pulumi_tailscale-1.0.0a1754635854 → pulumi_tailscale-1.0.0a1764138241}/pulumi_tailscale/device_authorization.py

@@ -120,6 +120,8 @@ class DeviceAuthorization(pulumi.CustomResource):
 
         ## Import
 
+        The `pulumi import` command can be used, for example:
+
         Device authorization can be imported using the node ID (preferred), e.g.,
 
         ```sh
@@ -160,6 +162,8 @@ class DeviceAuthorization(pulumi.CustomResource):
 
         ## Import
 
+        The `pulumi import` command can be used, for example:
+
         Device authorization can be imported using the node ID (preferred), e.g.,
 
         ```sh

{pulumi_tailscale-1.0.0a1754635854 → pulumi_tailscale-1.0.0a1764138241}/pulumi_tailscale/device_key.py

@@ -121,6 +121,8 @@ class DeviceKey(pulumi.CustomResource):
 
         ## Import
 
+        The `pulumi import` command can be used, for example:
+
         Device key can be imported using the node ID (preferred), e.g.,
 
         ```sh
@@ -161,6 +163,8 @@ class DeviceKey(pulumi.CustomResource):
 
         ## Import
 
+        The `pulumi import` command can be used, for example:
+
         Device key can be imported using the node ID (preferred), e.g.,
 
         ```sh

{pulumi_tailscale-1.0.0a1754635854 → pulumi_tailscale-1.0.0a1764138241}/pulumi_tailscale/device_subnet_routes.py

@@ -128,6 +128,8 @@ class DeviceSubnetRoutes(pulumi.CustomResource):
 
         ## Import
 
+        The `pulumi import` command can be used, for example:
+
         Device subnet rules can be imported using the node ID (preferred), e.g.,
 
         ```sh
@@ -176,6 +178,8 @@ class DeviceSubnetRoutes(pulumi.CustomResource):
 
         ## Import
 
+        The `pulumi import` command can be used, for example:
+
         Device subnet rules can be imported using the node ID (preferred), e.g.,
 
         ```sh

{pulumi_tailscale-1.0.0a1754635854 → pulumi_tailscale-1.0.0a1764138241}/pulumi_tailscale/device_tags.py

@@ -120,6 +120,8 @@ class DeviceTags(pulumi.CustomResource):
 
         ## Import
 
+        The `pulumi import` command can be used, for example:
+
         Device tags can be imported using the node ID (preferred), e.g.,
 
         ```sh
@@ -160,6 +162,8 @@ class DeviceTags(pulumi.CustomResource):
 
         ## Import
 
+        The `pulumi import` command can be used, for example:
+
         Device tags can be imported using the node ID (preferred), e.g.,
 
         ```sh