# Headscale — Notes

## v0.29+ CLI: inconsistent user identifier types

Different commands in headscale v0.29 accept different user identifiers:

| Command | Accepts |
|---|---|
| `preauthkeys create --user <id>` | numeric ID only |
| `auth register --user <username>` | username string |
| `users destroy --identifier <id>` | numeric ID only (not positional) |

Always list users first to get the ID:

```bash
headscale users list

headscale preauthkeys create --user 1                          # numeric ID
headscale auth register --auth-id <id> --user payne            # username OK
headscale users destroy --identifier 1                         # numeric ID
```

## Node registration via browser

When a Tailscale client connects via browser (not pre-auth key), headscale shows a command like:

```
headscale auth register --auth-id hskey-authreq-XXXX --user USERNAME
```

Run it via:

```bash
kubectl exec -n headscale deploy/headscale -- \
  headscale auth register --auth-id <id> --user <username>
```