Struct ControlRunner 

pub struct ControlRunner { /* private fields */ }

Actor responsible for maintaining the connection to control.

This actor is responsible for proxying the map response stream onto the message bus.

Implementations

impl ControlRunner

pub fn ipv4( &self, ctx: &mut Context<Self, DelegatedReply<Option<Ipv4Addr>>>, ) -> DelegatedReply<Option<Ipv4Addr>>

Fetch the IPv4 address for this tailscale device.

pub fn ipv6( &self, ctx: &mut Context<Self, DelegatedReply<Option<Ipv6Addr>>>, ) -> DelegatedReply<Option<Ipv6Addr>>

Fetch the IPv6 address for this tailscale device.

pub fn self_node( &self, ctx: &mut Context<Self, DelegatedReply<Option<Node>>>, ) -> DelegatedReply<Option<Node>>

Fetch the self node for this tailscale device.

pub fn current_ssh_policy(&self) -> Option<SshPolicy>

Fetch the current Tailscale SSH policy, if control has pushed one.

Returns None when control has not sent an SSH policy (the SSH server treats this as deny-all — fail-closed). Unlike self_node this does not block waiting for a value: an absent policy is a legitimate, immediate answer.

pub fn current_tka_status(&self) -> Option<TkaStatus>

Fetch the current Tailnet Lock status, if control has pushed one.

Returns None when control has sent no TKAInfo (tailnet lock not in use / no change seen).

pub fn fetch_id_token( &self, ctx: &mut Context<Self, DelegatedReply<Result<String, IdTokenError>>>, audience: String, ) -> DelegatedReply<Result<String, IdTokenError>>

Request an OIDC ID token from control scoped to audience (workload-identity federation).

Opens a fresh Noise channel and POSTs /machine/id-token; returns the signed JWT or an IdTokenError. Runs on a spawned task (delegated reply) so the actor mailbox isn’t blocked for the round-trip.

pub fn logout( &self, ctx: &mut Context<Self, DelegatedReply<Result<(), LogoutError>>>, ) -> DelegatedReply<Result<(), LogoutError>>

Log this node out of the tailnet: deregister it by expiring its current node key.

Mirrors fetch_id_token: clones the control config + node keys into a spawned task (delegated reply, so the round-trip doesn’t block the mailbox) and re-POSTs /machine/register with a past expiry over a fresh Noise channel. This is a control-plane state change only — it does NOT stop this actor or tear down the datapath (the caller follows up with the normal runtime shutdown), and it does not touch the on-disk node key, so re-registering with the same key is the re-login path.

Trait Implementations

impl Actor for ControlRunner

type Args = Params

Arguments to initialize the actor.

type Error = ControlRunnerError

Actor error type.

async fn on_start( params: Params, slf: ActorRef<Self>, ) -> Result<Self, Self::Error>

Called when the actor starts, before it processes any messages.

fn name() -> &'static str

The name of the actor, which can be useful for logging or debugging.

fn on_message( &mut self, msg: Box<dyn DynMessage<Self>>, actor_ref: ActorRef<Self>, tx: Option<Sender<Result<Box<dyn Any + Send>, SendError<Box<dyn Any + Send>, Box<dyn Any + Send>>>>>, stop: &mut bool, ) -> impl Future<Output = Result<(), Box<dyn ReplyError>>> + Send

Called when the actor receives a message to be processed.

fn on_panic( &mut self, actor_ref: WeakActorRef<Self>, err: PanicError, ) -> impl Future<Output = Result<ControlFlow<ActorStopReason>, Self::Error>> + Send

Called when the actor encounters a panic or an error during “tell” message handling.

fn on_link_died( &mut self, actor_ref: WeakActorRef<Self>, id: ActorId, reason: ActorStopReason, ) -> impl Future<Output = Result<ControlFlow<ActorStopReason>, Self::Error>> + Send

Called when a linked actor dies.

fn on_stop( &mut self, actor_ref: WeakActorRef<Self>, reason: ActorStopReason, ) -> impl Future<Output = Result<(), Self::Error>> + Send

Called before the actor stops.

fn next( &mut self, actor_ref: WeakActorRef<Self>, mailbox_rx: &mut MailboxReceiver<Self>, ) -> impl Future<Output = Option<Signal<Self>>> + Send

Awaits the next signal typically from the mailbox.

impl Message<CurrentSshPolicy> for ControlRunner

type Reply = Option<SshPolicy>

The reply sent back to the message caller.

async fn handle( &mut self, msg: CurrentSshPolicy, _ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<CurrentTkaStatus> for ControlRunner

type Reply = Option<TkaStatus>

The reply sent back to the message caller.

async fn handle( &mut self, msg: CurrentTkaStatus, _ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<FetchIdToken> for ControlRunner

type Reply = DelegatedReply<Result<String, IdTokenError>>

The reply sent back to the message caller.

async fn handle( &mut self, msg: FetchIdToken, ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<Ipv4> for ControlRunner

type Reply = DelegatedReply<Option<Ipv4Addr>>

The reply sent back to the message caller.

async fn handle( &mut self, msg: Ipv4, ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<Ipv6> for ControlRunner

type Reply = DelegatedReply<Option<Ipv6Addr>>

The reply sent back to the message caller.

async fn handle( &mut self, msg: Ipv6, ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<Logout> for ControlRunner

type Reply = DelegatedReply<Result<(), LogoutError>>

The reply sent back to the message caller.

async fn handle( &mut self, msg: Logout, ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<SelfNode> for ControlRunner

type Reply = DelegatedReply<Option<Node>>

The reply sent back to the message caller.

async fn handle( &mut self, msg: SelfNode, ctx: &mut Context<Self, Self::Reply>, ) -> Self::Reply

Handler for this message.

impl Message<StreamMessage<Arc<StateUpdate>, (), ()>> for ControlRunner

type Reply = ()

The reply sent back to the message caller.

async fn handle( &mut self, msg: StreamMessage<Arc<StateUpdate>, (), ()>, _ctx: &mut Context<Self, Self::Reply>, )

Handler for this message.