Support Tailscale SSH

[mheffner]

Curious if you've looked at the (in beta) Tailscale SSH support. Could it replace some of the SSM responsibilities here?

[Gowiem]

@mheffner that's a good question -- we have not yet. I believe today for our org/client needs, we typically use Tailscale as a means to get at internal network resources, which has largely removed our need to SSH / port-forward. That said... I imagine we should at least confirm that our module supports the new SSH capabilities. Something I'll look into and report back on.

The SSH functionality would definitely replace or overlap the SSM responsibilities, but I would imagine it would still be useful to keep around as a backup in case Tailscale is down or something gets borked with the configuration. Still, maybe that's just me thinking of worst case scenario and we could simplify this module a good deal by removing the SSM agent side of things. Something we'll think about internally.

cc @gberenice in case she has any thoughts / has tried out Tailscale SSH.

[mheffner]

Thanks for the quick response @Gowiem, makes sense. Yeah, I don't know how often we would realistically need to SSH into the TS subnet router boxes. Having a backup could be nice, we would need to think through the scenarios a bit more.

Thanks for all the work you've put into the module here!

[Gowiem]

@mheffner we ended up needing tailscale SSH support for a client, so we built it in. Check out https://github.com/masterpointio/terraform-aws-tailscale/releases/tag/1.0.0 and let us know your thoughts!