feat: machine authorization

proto/ionscale/v1/auth_keys.proto

@@ -21,6 +21,7 @@ message CreateAuthKeyRequest {
   bool ephemeral = 2;
   optional google.protobuf.Duration expiry = 3;
   repeated string tags = 4;
+  bool pre_authorized = 5;
 }
 
 message CreateAuthKeyResponse {

proto/ionscale/v1/ionscale.proto

@@ -38,6 +38,8 @@ service IonscaleService {
   rpc DisableServiceCollection(DisableServiceCollectionRequest) returns (DisableServiceCollectionResponse) {}
   rpc EnableSSH(EnableSSHRequest) returns (EnableSSHResponse) {}
   rpc DisableSSH(DisableSSHRequest) returns (DisableSSHResponse) {}
+  rpc EnableMachineAuthorization(EnableMachineAuthorizationRequest) returns (EnableMachineAuthorizationResponse) {}
+  rpc DisableMachineAuthorization(DisableMachineAuthorizationRequest) returns (DisableMachineAuthorizationResponse) {}
 
   rpc GetDNSConfig(GetDNSConfigRequest) returns (GetDNSConfigResponse) {}
   rpc SetDNSConfig(SetDNSConfigRequest) returns (SetDNSConfigResponse) {}
@@ -58,6 +60,7 @@ service IonscaleService {
 
   rpc GetMachine(GetMachineRequest) returns (GetMachineResponse) {}
   rpc ListMachines(ListMachinesRequest) returns (ListMachinesResponse) {}
+  rpc AuthorizeMachine(AuthorizeMachineRequest) returns (AuthorizeMachineResponse) {}
   rpc ExpireMachine(ExpireMachineRequest) returns (ExpireMachineResponse) {}
   rpc DeleteMachine(DeleteMachineRequest) returns (DeleteMachineResponse) {}
   rpc SetMachineKeyExpiry(SetMachineKeyExpiryRequest) returns (SetMachineKeyExpiryResponse) {}

proto/ionscale/v1/machines.proto

@@ -42,6 +42,12 @@ message GetMachineResponse {
   Machine machine = 1;
 }
 
+message AuthorizeMachineRequest {
+  uint64 machine_id = 1;
+}
+
+message AuthorizeMachineResponse {}
+
 message Machine {
   uint64 id = 1;
   string name = 2;
@@ -63,6 +69,7 @@ message Machine {
   repeated string advertised_routes = 18;
   bool advertised_exit_node = 19;
   bool enabled_exit_node = 20;
+  bool authorized = 21;
 }
 
 message ClientConnectivity {

proto/ionscale/v1/tailnets.proto

@@ -99,3 +99,15 @@ message DisableSSHRequest {
 }
 
 message DisableSSHResponse {}
+
+message EnableMachineAuthorizationRequest {
+  uint64 tailnet_id = 1;
+}
+
+message EnableMachineAuthorizationResponse {}
+
+message DisableMachineAuthorizationRequest {
+  uint64 tailnet_id = 1;
+}
+
+message DisableMachineAuthorizationResponse {}