Manage Tailscale resources using Pulumi

Pulumi is an infrastructure as code (IaC) tool that lets you deploy infrastructure programmatically. Pulumi maintains the Tailscale Pulumi provider in the Pulumi registry.

You can use the Tailscale Pulumi provider to:

Define your ACLs using the Acl resource.
Set DNS settings, including:
- Global nameservers using the DnsNameservers resource.
- Restricted nameservers for split DNS using the DnsSearchPaths resource.
- MagicDNS using the DnsPreferences resource.
Generate an auth key (including setting whether it's reusable, ephemeral, pre-authorized, and tagged) using the TailnetKey resource.
Manage properties of a device, including:
- Device approval using the DeviceAuthorization resource.
- Key expiry using the DeviceKey resource.
- Tags using the DeviceTags resource.
- Subnet routes using the DeviceSubnetRoutes resource.

Installation steps

To use Pulumi with Tailscale:

Install the package for the Tailscale Pulumi provider in Node.js, Python, Go, or .NET.
Set the Tailscale configuration for Pulumi with an API access token for Tailscale and with the name of your tailnet. You can either set these as environment variables or as part of your Pulumi configuration. To set these in your Pulumi configuration:
```
pulumi config set tailscale:apiKey tskey-1234567CNTRL-abcdefghijklmnopqrstu --secret
pulumi config set tailscale:tailnet example.com
```

Support

If you have an issue or feature request, file a GitHub issue.

Last updated Mar 3, 2025