7 ms·
It would not have prevented the initial exploit. The agent gained access to the K8s cluster and read the Tailscale Auth Key from Cluster Secrets. A short-lived
by submitaticket 2mo ago
It would not have prevented the initial exploit. The agent gained access to the K8s cluster and read the Tailscale Auth Key from Cluster Secrets. A short-lived credential would reduce the risk that the key is still valid when an agent gains access.
- sandeepkd 2mo agoThats the point, the short lived credentials would have done much other than adding more step of getting the secrets again which is why I am questioning the discussion of that in a root cause analysis itself. Adding one more layer does not increases the security by default in every case.
- tremon 2mo agoA short-lived credential would reduce the risk that the key is still valid when an agent gains access How does that work? If the agent is reading the credential from the live configuration, how short does the lifespan of a key need to be to prevent it from being used by an unauthorized process?
- submitaticket 2mo agoLong enough to authenticate the node into the Tailnet. Short enough to revoke itself before the Agent can use it.