Software-defined mesh networks are quite a bit more powerful than conventional VPNs, even if they often get used for the same purposes.
The tailscale k8s operator actually does auth as well as vpn.
that's exactly what i said. :)
Nah, it effectively auths you against whatever saml/oicd provider you're using to back tailscale, along with the acls you define. It's not just 'network access = auth'.
SDN-powered VPNs aren’t the same thing as old school VPNs