tka: clarify field comment

Updates #cleanup Signed-off-by: Jenny Zhang <jz@tailscale.com>
2 years ago · 09b4914916
parent 67f3b2a525
commit 09b4914916
1 changed files with 4 additions and 1 deletions
--- a/tka/state.go
+++ b/tka/state.go
@ -30,7 +30,10 @@ type State struct {
 	// to turn off the TKA in the event of a consensus-breaking bug.
 	DisablementSecrets [][]byte `cbor:"2,keyasint"`

-	// Keys are the public keys currently trusted by the TKA.
+	// Keys are the public keys of either:
+	//
+	//   1. The signing nodes currently trusted by the TKA.
+	//   2. Ephemeral keys that were used to generate pre-signed auth keys.
 	Keys []Key `cbor:"3,keyasint"`

 	// StateID's are nonce's, generated on enablement and fixed for