all: update a few more references to network/tailnet lock
Updates tailscale/corp#37904 Change-Id: I746b06328e080fa2b9ff28a2d099f95645aa3d0b Signed-off-by: Alex Chan <alexc@tailscale.com>
This commit is contained in:
@@ -111,11 +111,11 @@ type TKAPeer struct {
|
|||||||
// along with details about the locally-known state of the tailnet
|
// along with details about the locally-known state of the tailnet
|
||||||
// key authority.
|
// key authority.
|
||||||
type NetworkLockStatus struct {
|
type NetworkLockStatus struct {
|
||||||
// Enabled is true if network lock is enabled.
|
// Enabled is true if tailnet lock is enabled.
|
||||||
Enabled bool
|
Enabled bool
|
||||||
|
|
||||||
// Head describes the AUM hash of the leaf AUM. Head is nil
|
// Head describes the AUM hash of the leaf AUM. Head is nil
|
||||||
// if network lock is not enabled.
|
// if tailnet lock is not enabled.
|
||||||
Head *[32]byte
|
Head *[32]byte
|
||||||
|
|
||||||
// PublicKey describes the node's tailnet-lock public key.
|
// PublicKey describes the node's tailnet-lock public key.
|
||||||
@@ -145,9 +145,9 @@ type NetworkLockStatus struct {
|
|||||||
// checks.
|
// checks.
|
||||||
FilteredPeers []*TKAPeer
|
FilteredPeers []*TKAPeer
|
||||||
|
|
||||||
// StateID is a nonce associated with the network lock authority,
|
// StateID is a nonce associated with the tailnet lock authority,
|
||||||
// generated upon enablement. This field is not populated if the
|
// generated upon enablement. This field is not populated if the
|
||||||
// network lock is disabled.
|
// tailnet lock is disabled.
|
||||||
StateID uint64
|
StateID uint64
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
+1
-1
@@ -111,7 +111,7 @@ type TKABootstrapRequest struct {
|
|||||||
NodeKey key.NodePublic
|
NodeKey key.NodePublic
|
||||||
|
|
||||||
// Head represents the node's head AUMHash (tka.Authority.Head), if
|
// Head represents the node's head AUMHash (tka.Authority.Head), if
|
||||||
// network lock is enabled.
|
// tailnet lock is enabled.
|
||||||
Head string
|
Head string
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
+1
-1
@@ -303,7 +303,7 @@ func TestSigSerializeUnserialize(t *testing.T) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
func TestNodeKeySignatureRotationDetails(t *testing.T) {
|
func TestNodeKeySignatureRotationDetails(t *testing.T) {
|
||||||
// Trusted network lock key
|
// Trusted tailnet lock key
|
||||||
pub, priv := testingKey25519(t, 1)
|
pub, priv := testingKey25519(t, 1)
|
||||||
k := Key{Kind: Key25519, Public: pub, Votes: 2}
|
k := Key{Kind: Key25519, Public: pub, Votes: 2}
|
||||||
|
|
||||||
|
|||||||
+2
-2
@@ -10,6 +10,6 @@ package tsconst
|
|||||||
const WintunInterfaceDesc = "Tailscale Tunnel"
|
const WintunInterfaceDesc = "Tailscale Tunnel"
|
||||||
const WintunInterfaceDesc0_14 = "Wintun Userspace Tunnel"
|
const WintunInterfaceDesc0_14 = "Wintun Userspace Tunnel"
|
||||||
|
|
||||||
// TailnetLockNotTrustedMsg is the error message used by network lock
|
// TailnetLockNotTrustedMsg is the error message used by tailnet lock
|
||||||
// and sniffed (via substring) out of an error sent over the network.
|
// and sniffed (via substring) out of an error sent over the network.
|
||||||
const TailnetLockNotTrustedMsg = "this node is not trusted by network lock"
|
const TailnetLockNotTrustedMsg = "this node is not trusted by Tailnet Lock"
|
||||||
|
|||||||
@@ -1130,7 +1130,7 @@ func (n *TestNode) PublicKey() string {
|
|||||||
return st.Self.PublicKey
|
return st.Self.PublicKey
|
||||||
}
|
}
|
||||||
|
|
||||||
// NLPublicKey returns the hex-encoded network lock public key of
|
// NLPublicKey returns the hex-encoded tailnet lock public key of
|
||||||
// this node, e.g. `tlpub:123456abc`
|
// this node, e.g. `tlpub:123456abc`
|
||||||
func (n *TestNode) NLPublicKey() string {
|
func (n *TestNode) NLPublicKey() string {
|
||||||
tb := n.env.t
|
tb := n.env.t
|
||||||
|
|||||||
@@ -29,7 +29,7 @@ type Persist struct {
|
|||||||
AttestationKey key.HardwareAttestationKey `json:",omitzero"`
|
AttestationKey key.HardwareAttestationKey `json:",omitzero"`
|
||||||
|
|
||||||
// DisallowedTKAStateIDs stores the tka.State.StateID values which
|
// DisallowedTKAStateIDs stores the tka.State.StateID values which
|
||||||
// this node will not operate network lock on. This is used to
|
// this node will not operate tailnet lock on. This is used to
|
||||||
// prevent bootstrapping TKA onto a key authority which was forcibly
|
// prevent bootstrapping TKA onto a key authority which was forcibly
|
||||||
// disabled.
|
// disabled.
|
||||||
DisallowedTKAStateIDs []string `json:",omitempty"`
|
DisallowedTKAStateIDs []string `json:",omitempty"`
|
||||||
|
|||||||
@@ -96,7 +96,7 @@ func (v PersistView) NodeID() tailcfg.StableNodeID { return v.ж.NodeID
|
|||||||
func (v PersistView) AttestationKey() tailcfg.StableNodeID { panic("unsupported") }
|
func (v PersistView) AttestationKey() tailcfg.StableNodeID { panic("unsupported") }
|
||||||
|
|
||||||
// DisallowedTKAStateIDs stores the tka.State.StateID values which
|
// DisallowedTKAStateIDs stores the tka.State.StateID values which
|
||||||
// this node will not operate network lock on. This is used to
|
// this node will not operate tailnet lock on. This is used to
|
||||||
// prevent bootstrapping TKA onto a key authority which was forcibly
|
// prevent bootstrapping TKA onto a key authority which was forcibly
|
||||||
// disabled.
|
// disabled.
|
||||||
func (v PersistView) DisallowedTKAStateIDs() views.Slice[string] {
|
func (v PersistView) DisallowedTKAStateIDs() views.Slice[string] {
|
||||||
|
|||||||
Reference in New Issue
Block a user