Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

{docs,tailscale}: better document device_subnet_routes #428

Merged
merged 1 commit into from
Sep 10, 2024

Conversation

mpminardi
Copy link
Member

Add better documentation to the device_subnet_routes resource to clarify that routes need to be advertised on the device itself, and that all routes (including those enabled via the admin console / autoApprovers in the ACL) must be added to the routes param when using this resource to avoid configuration drift.

Updates https://github.com/tailscale/corp/issues/22115

@mpminardi mpminardi requested a review from oxtoacart September 9, 2024 19:35
@mpminardi mpminardi self-assigned this Sep 9, 2024
@mpminardi mpminardi force-pushed the mpminardi/better-subnet-routes-docs branch from bc6f6a9 to 334d161 Compare September 9, 2024 19:37
@@ -3,12 +3,18 @@
page_title: "tailscale_device_subnet_routes Resource - terraform-provider-tailscale"
subcategory: ""
description: |-
The device_subnet_routes resource allows you to configure subnet routes for your Tailscale devices. See https://tailscale.com/kb/1019/subnets for more information.
"The device_subnet_routes resource allows you to configure enabled subnet routes for your Tailscale devices. See https://tailscale.com/kb/1019/subnets for more information.
Routes must be both advertised and enabled for a device to act as a subnet router or exit node. Advertised routes must be set directly on the device and cannot be managed through Terraform. If a device has advertised routes, they are not exposed to traffic until they are enabled. Conversely, if routes are enabled before they are advertised, they are not available for routing until the device in question has advertised them.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit:

"advertised routes must be set directly on the device" -> "routes must be advertised directly from the device"

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit:

"If a device has advertised routes" -> "If a device is advertising routes"

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit:

"the device in question has advertised them" -> "the device in question is advertising them"

The device_subnet_routes resource allows you to configure subnet routes for your Tailscale devices. See https://tailscale.com/kb/1019/subnets for more information.
"The device_subnet_routes resource allows you to configure enabled subnet routes for your Tailscale devices. See https://tailscale.com/kb/1019/subnets for more information.

Routes must be both advertised and enabled for a device to act as a subnet router or exit node. Advertised routes must be set directly on the device and cannot be managed through Terraform. If a device has advertised routes, they are not exposed to traffic until they are enabled. Conversely, if routes are enabled before they are advertised, they are not available for routing until the device in question has advertised them.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similar nits as above.

Add better documentation to the device_subnet_routes resource to clarify
that routes need to be advertised on the device itself, and that all routes
(including those enabled via the admin console / autoApprovers in the ACL)
must be added to the `routes` param when using this resource to avoid
configuration drift.

Updates tailscale/corp#22115

Signed-off-by: Mario Minardi <[email protected]>
@mpminardi mpminardi force-pushed the mpminardi/better-subnet-routes-docs branch from 334d161 to b086ba8 Compare September 10, 2024 15:15
@mpminardi mpminardi merged commit ed15c6e into main Sep 10, 2024
4 checks passed
@mpminardi mpminardi deleted the mpminardi/better-subnet-routes-docs branch September 10, 2024 15:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants