pub async fn tailscale_client(
make_builder: &ClientBuilderFactory,
) -> Option<Client>Expand description
Probe the canopy tailnet endpoint, returning a client routed to it if reachable.
The returned client carries the same DNS / hardcoded-IP resolution override
the reporting client uses and presents no client certificate — callers
reaching canopy this way authenticate by tailnet identity. Returns None
when the tailnet endpoint isn’t reachable, so callers can fall back to
public mTLS.