starred/headscale
1
0
Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2026-01-11 20:00:28 +01:00
Code Issues 98 Packages Projects Releases 10 Wiki Activity

Tags cannot owner other tags #1135

New Issue
Closed
opened 2025-12-29 02:28:29 +01:00 by adam · 0 comments
adam commented 2025-12-29 02:28:29 +01:00
Owner
Copy Link

Originally created by @misterupkeep on GitHub (Nov 6, 2025).

Trying a policy file such as:

{
  "tagOwners": {
    "tag:k8s": ["tag:k8s-operator"],
  },
}

will fail while parsing, here:
2024219bd1/hscontrol/policy/v2/types.go (L969-L983)

A quick glance at the code suggests tags were never implemented such as to support this. Tags owning other tags is a feature used in the K8s Tailscale operator setup (as shown here).

Originally created by @misterupkeep on GitHub (Nov 6, 2025). Trying a policy file such as: ```json { "tagOwners": { "tag:k8s": ["tag:k8s-operator"], }, } ``` will fail while parsing, here: https://github.com/juanfont/headscale/blob/2024219bd10adbb5c0d29f900ed0961ace8cc15c/hscontrol/policy/v2/types.go#L969-L983 A quick glance at the code suggests tags were never implemented such as to support this. Tags owning other tags is a feature used in the K8s Tailscale operator setup (as shown [here](https://tailscale.com/kb/1236/kubernetes-operator#prerequisites)).
adam added the bug label 2025-12-29 02:28:29 +01:00
adam closed this issue 2025-12-29 02:28:29 +01:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
CLI
DERP
DNS
Nix
OIDC
SSH
bug
database
documentation
duplicate
enhancement
faq
good first issue
grants
help wanted
might-come
needs design doc
needs investigation
no-stale-bot
out of scope
performance
policy 📝
pull-request
Mirrored from GitHub Pull Request
 question
regression
routes
stale
tags
tailscale-feature-gap
well described ❤️
wontfix
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#1135
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?