Control: Customize node key expiration

Usage

Run the control in your terminal:

steampipe check tailscale_compliance.control.security_best_practices_device_node_key_expire

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share tailscale_compliance.control.security_best_practices_device_node_key_expire

tailscale_device

SQL

select
  id as resource,
  case
    when key_expiry_disabled then 'alarm'
    else 'ok'
  end as status,
  case
    when key_expiry_disabled then name || ' key expiration disabled.'
    else name || ' key expiration enabled.'
  end as reason,
  tailnet_name
from
  tailscale_device;