35 lines
814 B
YAML
35 lines
814 B
YAML
|
name: Sync Tailscale ACLs
|
||
|
|
|
||
|
|
on:
|
||
|
|
push:
|
||
|
|
branches: [ "main" ]
|
||
|
|
pull_request:
|
||
|
|
branches: [ "main" ]
|
||
|
|
|
||
|
|
jobs:
|
||
|
|
acls:
|
||
|
|
runs-on: ubuntu-latest
|
||
|
|
|
||
|
|
steps:
|
||
|
|
- uses: actions/checkout@v3
|
||
|
|
|
||
|
|
- name: Deploy ACL
|
||
|
|
if: github.event_name == 'push'
|
||
|
|
id: deploy-acl
|
||
|
|
uses: tailscale/gitops-acl-action@v1
|
||
|
|
with:
|
||
|
|
api-key: ${{ secrets.TS_API_KEY }}
|
||
|
|
tailnet: ${{ secrets.TS_TAILNET }}
|
||
|
|
action: apply
|
||
|
|
policy-file: config/tailscale.hujson
|
||
|
|
|
||
|
|
- name: Test ACL
|
||
|
|
if: github.event_name == 'pull_request'
|
||
|
|
id: test-acl
|
||
|
|
uses: tailscale/gitops-acl-action@v1
|
||
|
|
with:
|
||
|
|
api-key: ${{ secrets.TS_API_KEY }}
|
||
|
|
tailnet: ${{ secrets.TS_TAILNET }}
|
||
|
|
action: test
|
||
|
|
policy-file: config/tailscale.hujson
|