Day 4 of Winter Update Week: Tailscale Services GA and Workload Identity GA
Hi everyone, back with Day 4 of Winter Update Week! ❄️
Today’s updates are a big milestone: Tailscale Services is now generally available. Workload identity federation is also now generally available.
Services are all about making connectivity service-aware. Instead of connecting to individual machines and IPs, you can publish internal resources (databases, APIs, web servers) as stable, named Services in your tailnet.
Since the beta, we’ve shipped a lot of improvements, including:
- Native tsnet integration (app-aware Services directly in Go apps)
- Service-aware egress from Kubernetes workloads
- Ability to point Services at remote destinations (like managed databases)
- Stronger observability with audit logs + flow logs
- Declarative config for GitOps-style workflows
Together with workload identity federation GA, this makes it much easier to run secure, scalable connectivity across modern infra without bolting on a full service mesh.
Check out our blog on services and our workload identity federation blog here.
More details are coming in today’s webinar. Join here and see you there!
Posted Feb 19, 2026, 3:50 PM UTC · edited