File tree 1 file changed +2
-2
lines changed
1 file changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -21,7 +21,7 @@ Configuration is done by settings environment variables:
21
21
- TS_API_KEY: a Tailscale API key
22
22
- TS_KEYS_ISSUER: a trusted OIDC Issuer url (e.g. https://token.actions.githubusercontent.com )
23
23
- TS_KEYS_TAGS: comma-separated list of ACL tags
24
- - TS_KEY_BEXPR : a boolean expression to filter OIDC tokens (based on claims) when creating auth keys
24
+ - TS_KEYS_BEXPR : a boolean expression to filter OIDC tokens (based on claims) when creating auth keys
25
25
26
26
The last setting is quit important as it allows you to filter OIDC tokens and only creating auth keys when the token has some certain claims.
27
27
@@ -31,7 +31,7 @@ In case of GitHub Action, the issued token has a `repository` claim.
31
31
The following expression will only create auth keys for a workflow from this repository:
32
32
33
33
``` shell
34
- export TS_KEY_BEXPR =' repository == "jsiebens/tskeys-example"'
34
+ export TS_KEYS_BEXPR =' repository == "jsiebens/tskeys-example"'
35
35
```
36
36
37
37
The boolean expression is implemented using the [ HashiCorp go-bexpr] ( https://github.com/hashicorp/go-bexpr ) library
You can’t perform that action at this time.
0 commit comments