SSH Functionality missing

[98jan]

Description

Hi,

I updated today in my Kubernetes Cluster headplane to the latest version 0.6.1 to test the new headplane feature but I can nowhere see the ssh options.

I can see now a running instance of the headplane-agent but that's it, my config.yaml looks like the following

    server:
      host: "0.0.0.0"
      port: 3000
      cookie_secret_path: /etc/headscale/oidc/cookieSecret
      cookie_secure: true
    headscale:
      url: https://headscale.$DOMAIN
      config_path: "/etc/headscale/config.yaml"
      config_strict: true
    integration:
      agent:
        enabled: true
        pre_authkey_path: /etc/headplane/oidc/agent_authkey
        host_name: headplane-agent
    #  kubernetes:
    #    enabled: true
    #    validate_manifest: true
    oidc:
      issuer: https://${KEYCLOAK_DOMAIN}/realms/<realm-name>
      client_id: headplane
      client_secret_path: /etc/headplane/oidc/oidc_client_secret
      redirect_url: https://headplane.$DOMAIN/admin/oidc/callback
      disable_api_key_login: false
      token_endpoint_auth_method: "client_secret_post"
      headscale_api_key_path: /etc/headplane/oidc/headscale_apiKey

Anything that I am missing?

Headplane Version

v0.6.1

Headscale Version

0.26.1

[tale]

Hey sorry about that. I'm still working to get the documentation in a better state but you need to have the agent running properly, the machines need to be joined with the "tailscale up --ssh" flag, AND you may need to restart Headscale.

[98jan]

Okay that means every node I am adding and which is allowed to connect to needs to be started with --ssh right?

[lunarthegrey]

Oddly I have --ssh on all nodes, the agent running, and I restarted headscale and it still doesn't show up.

[seanob86]

I have the ssh option, but after entering the user I see this

[98jan]

After adding the node with --ssh I can open the window for connecting to the server, but I am getting a timeout, is there an ACL rule needed specifically for this?
I am quite new to headscale and trying to figure this out.

[seanob86]

I have the ssh option, but after entering the user I see this

Seems my error was related to the fact that I was trying on iPad. No issues on windows firefox browser

[tale]

Sorry I've only just gotten around to dealing with triage, 2 things.

• You'll need to enable the Headplane Agent for ssh: https://headplane.net/features/agent
• It looks like there's a bug on Safari, see SSH WASM Hook crashes on Safari #337.

[Tigo72]

I've got the agent up for ages, it has a valid reusable auth key, I think all the acls are in order (can ssh and tailscale ssh different nodes through any cli), the relevant nodes are ssh flagged, rebooted the lot a few times, but the web-ui refuses to connect me to any node for ssh. The wheel just keeps on spinning. And I'm not on safari either ;-), tried both Firefox and DuckDuckBrowser. I guess I should be all set, but no luck yet. Perhaps someone here can point me in the right direction.

headplane:next, headscale:0.26.1