Approve or reject Tailscale device enrollments from Slack
Build a workflow triggered when a device requests Tailscale enrollment. Post the device details to Slack with approve/deny buttons. On approval, authorize the device in Tailscale; on denial, delete it. Verify Slack interactivity signatures, time out stale requests, and handle API errors. Output the decision and the resulting Tailscale action.
What this prompt builds
Review new Tailscale device enrollments in Slack and approve or auto-delete them.
The problem
Unvetted devices joining a tailnet expand the attack surface, but enrollment requests sit unmanaged without a quick review path. Admins either approve blindly or leave devices pending.
Solution and impact
This workflow posts each Tailscale enrollment to Slack for an approve/deny decision and deletes denied devices automatically. Device admission stays controlled with a fast, auditable Slack loop.