lfreleng-actions/OpenStack Bastion with Tailscale
Setup and manage an OpenStack bastion host with Tailscale VPN for secure remote access
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 10, 2026
- License
- Apache 2.0
Pinned Snippet
uses: lfreleng-actions/tailscale-openstack-bastion-action@eb920e9c30bbe25e908c317af504f8321367bc39 # v0.1.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| operation | Operation: 'setup' to create bastion, 'teardown' to destroy bastion | yes | — |
| openstack_auth_url | OpenStack auth URL | yes | — |
| openstack_project_id | OpenStack project/tenant ID | yes | — |
| openstack_username | OpenStack username | yes | — |
| openstack_password | OpenStack password (will be base64 decoded if needed) | yes | — |
| openstack_region | OpenStack region | no | ca-ymq-1 |
| openstack_network_id | OpenStack network UUID | no | "" |
| bastion_flavor | OpenStack flavor for bastion instance | no | v3-standard-2 |
| bastion_image | Base image for bastion host | no | Ubuntu 22.04.5 LTS (x86_64) [2025-03-27] |
| bastion_network | Network name for bastion host | no | odlci |
| bastion_ssh_key | SSH key name for bastion (optional, Tailscale SSH used by default) | no | "" |
| bastion_wait_timeout | Timeout in seconds to wait for bastion to be ready | no | 600 |
| bastion_name | Name for the bastion instance (defaults to bastion-gh-{run_id}) | no | "" |
| tailscale_oauth_client_id | Tailscale OAuth client ID (recommended - requires oauth_secret) | no | "" |
| tailscale_oauth_secret | Tailscale OAuth secret (recommended - requires oauth_client_id) | no | "" |
| tailscale_use_ephemeral_keys | Generate ephemeral auth keys from OAuth (recommended: true, legacy: false) | no | true |
| tailscale_auth_key | Tailscale auth key (legacy - OAuth is recommended) | no | "" |
| tailscale_tags | Comma-separated list of Tailscale tags for the GitHub runner (e.g., 'tag:ci') | no | tag:ci |
| bastion_tailscale_tags | Comma-separated list of Tailscale tags for the bastion VM (e.g., 'tag:bastion') | no | tag:bastion |
| tailscale_version | Tailscale version | no | latest |
| debug_mode | Enable debug logging | no | false |
Outputs
| name | description |
|---|---|
| bastion_ip | Tailscale IP of the bastion host |
| bastion_name | Name of the bastion instance |
| status | Status of the operation (success/failure) |