From d8a6d0183c35db1b8e7bf35d887772244c71e806 Mon Sep 17 00:00:00 2001
From: Patrick O'Doherty <patrick@tailscale.com>
Date: Fri, 10 Oct 2025 12:24:52 -0700
Subject: [PATCH] ipn/ipnlocal: strip AttestationKey in redacted prefs view
 (#17527)

Updates tailscale/corp#31269

Signed-off-by: Patrick O'Doherty <patrick@tailscale.com>
---
 ipn/ipnlocal/local.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ipn/ipnlocal/local.go b/ipn/ipnlocal/local.go
index 8cc74c41e..36e4ad8a5 100644
--- a/ipn/ipnlocal/local.go
+++ b/ipn/ipnlocal/local.go
@@ -1216,6 +1216,7 @@ func stripKeysFromPrefs(p ipn.PrefsView) ipn.PrefsView {
 	p2.Persist.PrivateNodeKey = key.NodePrivate{}
 	p2.Persist.OldPrivateNodeKey = key.NodePrivate{}
 	p2.Persist.NetworkLockKey = key.NLPrivate{}
+	p2.Persist.AttestationKey = nil
 	return p2.View()
 }