Pulumi Tailscale Provider
Manage your Tailscale network as code.
Overview
The Pulumi Tailscale provider allows for the programmatic management of a Tailscale network. It can be used to define ACLs, manage DNS settings, issue auth keys, and manage device properties, all within a Pulumi program. This enables teams to apply IaC principles to their secure networking overlay.
✨ Key Features
- Manage Tailnet ACLs (Access Control Lists)
- Configure DNS settings (nameservers, MagicDNS)
- Create and manage auth keys
- Manage device properties like tags, key expiry, and subnet routes
🎯 Key Differentiators
- Use of general-purpose programming languages for complex ACL logic
- Integration with cloud provider resources in the same program (e.g., creating a subnet router and advertising its routes)
- Enables GitOps workflows for network policy
Unique Value: Allows teams to manage their secure network overlay with the same IaC principles and tools used for their cloud infrastructure, improving security and auditability.
🎯 Use Cases (4)
✅ Best For
- Implementing a GitOps workflow for managing network security policies.
- Automatically authorizing and tagging new ephemeral CI runners as they come online.
💡 Check With Vendor
Verify these considerations match your specific requirements:
- Managing the installation of the Tailscale client itself.
🏆 Alternatives
Provides a more robust, version-controlled, and automatable alternative to manually managing network policies in a web UI. It allows for more complex logic and integration than may be possible with other IaC tools.
💻 Platforms
🔌 Integrations
💰 Pricing
Free tier: The provider is open-source and free. Costs are associated with the Tailscale subscription.
🔄 Similar Tools in Pulumi Cloud
Kubernetes
Pulumi's Kubernetes provider allows you to manage Kubernetes resources using languages like TypeScri...
Datadog
The Pulumi Datadog provider allows you to provision and manage Datadog resources like monitors, dash...
Cloudflare
The Pulumi Cloudflare provider lets you manage DNS records, firewall rules, workers, and other Cloud...
DigitalOcean
The Pulumi DigitalOcean provider lets you manage Droplets, Kubernetes clusters, databases, and other...
Auth0
The Pulumi Auth0 provider allows you to configure your Auth0 tenant, including applications, APIs, u...
Okta
The Pulumi Okta provider allows you to manage Okta resources like applications, users, groups, and p...