cmd/containerboot: add OAuth and WIF auth support (#18311)

Fixes tailscale/corp#34430 Signed-off-by: Raj Singh <raj@tailscale.com>
2026-01-07 16:22:14 -05:00
parent 6c67deff38
commit e66531041b
4 changed files with 131 additions and 10 deletions
@@ -120,6 +120,15 @@ func tailscaleUp(ctx context.Context, cfg *settings) error {
 	if cfg.AuthKey != "" {
 		args = append(args, "--authkey="+cfg.AuthKey)
 	}
+	if cfg.ClientID != "" {
+		args = append(args, "--client-id="+cfg.ClientID)
+	}
+	if cfg.ClientSecret != "" {
+		args = append(args, "--client-secret="+cfg.ClientSecret)
+	}
+	if cfg.IDToken != "" {
+		args = append(args, "--id-token="+cfg.IDToken)
+	}
 	// --advertise-routes can be passed an empty string to configure a
 	// device (that might have previously advertised subnet routes) to not
 	// advertise any routes. Respect an empty string passed by a user and