Rotate Tailscale auth key

[claytono]

Summary

• Rotate the vaulted Tailscale auth key used by Ansible.
• Keep the change scoped to ansible/group_vars/all/tailscale.yaml.

Validation

• ansible-playbook site.yaml -l k5 -t tailscale --syntax-check
• Commit hooks passed, including ansible-lint.
• Live k5 recovery validation completed separately: Tailscale role and full site.yaml -l k5 run finished with failed=0, and k5 is Ready with scheduled pods running.

[Copilot]

Pull request overview

Rotates the Ansible-managed Tailscale auth key stored in Ansible Vault so hosts can authenticate with the updated credential, scoped to the shared group vars.

Changes:

• Updated the vaulted tailscale_authkey value in group_vars/all for the Tailscale role.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 7bd5a4f5-fffa-4547-b8fc-22213c567c15

📥 Commits

Reviewing files that changed from the base of the PR and between 518a690 and 16f943c.

📒 Files selected for processing (1)

• ansible/group_vars/all/tailscale.yaml

---

Walkthrough

The Tailscale authentication key in ansible/group_vars/all/tailscale.yaml is rotated with a new Ansible Vault-encrypted value. The DNS configuration setting remains unchanged at --accept-dns=false.

Changes

Tailscale Configuration Update

Layer / File(s)	Summary
Tailscale Authentication Key Update ansible/group_vars/all/tailscale.yaml	The tailscale_authkey variable is replaced with a new Ansible Vault-encrypted multiline block; DNS settings unchanged.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'Rotate Tailscale auth key' clearly and concisely summarizes the main change: updating the vaulted Tailscale authentication key in the configuration.
Description check	✅ Passed	The description is directly related to the changeset, providing clear context about the auth key rotation, scope limitation to a single file, and comprehensive validation steps performed.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch rotate-tailscale-authkey

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}