Module control_runner 

Control runner.

Structs

CertDomains

The cert-eligible DNS names from control’s netmap DNS config (Go nm.DNS.CertDomains).

ControlRunner

Actor responsible for maintaining the connection to control.

CurrentSshPolicy

Fetch the current Tailscale SSH policy, if control has pushed one.

CurrentTkaStatus

Fetch the current Tailnet Lock status, if control has pushed one.

DnsConfig

The full DNS config from control’s netmap (Go netmap.NetworkMap.DNS), or None when control has sent no DNS config yet. An immediate answer (does not block); the facade surfaces this for Device::dns_config (the daemon’s tnet dns status).

FetchIdToken

Request an OIDC ID token from control scoped to audience (workload-identity federation).

Ipv4

Fetch the IPv4 address for this tailscale device.

Ipv6

Fetch the IPv6 address for this tailscale device.

Logout

Log this node out of the tailnet: deregister it by expiring its current node key.

Netcheck

The latest network-conditions report (preferred DERP region + per-region latencies). An immediate answer (does not block); empty before the first DERP-latency measurement. The facade surfaces this for Device::netcheck (the daemon’s tnet netcheck).

Params

Control runner args.

PopBrowserUrl

The interactive-login / consent URL control last asked this node to open (MapResponse.PopBrowserURL), or None when control has sent none. An immediate answer (does not block); the facade surfaces this for Device::pop_browser_url.

SelfNode

Fetch the self node for this tailscale device.

SetAdvertiseRoutes

Re-advertise this node’s routable IP prefixes (Hostinfo.RoutableIPs) to control — the wire half of a runtime Runtime::set_advertise_routes. Sent as a direct ask from the runtime (not over the bus), so the route change reaches the live map-poll client. routes is the final advertised set the caller wants control to grant.

SetDns

Publish a DNS record for this node via control’s /machine/set-dns (Go LocalClient.SetDNS).