mirror of
https://github.com/juanfont/headscale
synced 2026-04-25 17:15:33 +02:00
30dce30a9d
Rename all 594 test data files from .json to .hujson and add descriptive header comments to each file documenting what policy rules are under test and what outcome is expected. Update test loaders in all 5 _test.go files to parse HuJSON via hujson.Parse/Standardize/Pack before json.Unmarshal. Add cross-dependency warning to via_compat_test.go documenting that GRANT-V29/V30/V31/V36 are shared with TestGrantsCompat. Add .gitignore exemption for testdata HuJSON files.
323 lines
8.0 KiB
Plaintext
323 lines
8.0 KiB
Plaintext
// ACL-A02
|
|
//
|
|
// ACL: accept: src=['autogroup:tagged'] dst=['*:*']
|
|
//
|
|
// Expected: Rules on 8 of 8 nodes
|
|
{
|
|
"test_id": "ACL-A02",
|
|
"timestamp": "2026-03-17T14:16:44Z",
|
|
"propagation_wait_seconds": 10,
|
|
"input": {
|
|
"policy_file": "acl_policies/acl_a02.json",
|
|
"full_policy": {
|
|
"groups": {
|
|
"group:admins": ["kratail2tid@passkey"],
|
|
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
|
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
|
"group:empty": []
|
|
},
|
|
"tagOwners": {
|
|
"tag:server": ["kratail2tid@passkey"],
|
|
"tag:prod": ["kratail2tid@passkey"],
|
|
"tag:client": ["kratail2tid@passkey"],
|
|
"tag:router": ["kratail2tid@passkey"],
|
|
"tag:exit": ["kratail2tid@passkey"]
|
|
},
|
|
"hosts": {
|
|
"webserver": "100.108.74.26",
|
|
"prodbox": "100.103.8.15",
|
|
"internal": "10.0.0.0/8",
|
|
"subnet24": "192.168.1.0/24"
|
|
},
|
|
"autoApprovers": {
|
|
"routes": {
|
|
"10.33.0.0/16": ["tag:router"],
|
|
"0.0.0.0/0": ["tag:exit"],
|
|
"::/0": ["tag:exit"]
|
|
}
|
|
},
|
|
"acls": [
|
|
{
|
|
"action": "accept",
|
|
"src": ["autogroup:tagged"],
|
|
"dst": ["*:*"]
|
|
}
|
|
]
|
|
},
|
|
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
|
"api_response_code": 200
|
|
},
|
|
"topology": {
|
|
"nodes": {
|
|
"exit-node": {
|
|
"hostname": "exit-node",
|
|
"tags": ["tag:exit"],
|
|
"ipv4": "100.85.66.106",
|
|
"ipv6": "fd7a:115c:a1e0::7c37:426a"
|
|
},
|
|
"subnet-router": {
|
|
"hostname": "subnet-router",
|
|
"tags": ["tag:router"],
|
|
"ipv4": "100.92.142.61",
|
|
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
|
"routable_ips": ["10.33.0.0/16"],
|
|
"approved_routes": ["10.33.0.0/16"]
|
|
},
|
|
"tagged-client": {
|
|
"hostname": "tagged-client",
|
|
"tags": ["tag:client"],
|
|
"ipv4": "100.83.200.69",
|
|
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
|
},
|
|
"tagged-prod": {
|
|
"hostname": "tagged-prod",
|
|
"tags": ["tag:prod"],
|
|
"ipv4": "100.103.8.15",
|
|
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
|
},
|
|
"tagged-server": {
|
|
"hostname": "tagged-server",
|
|
"tags": ["tag:server"],
|
|
"ipv4": "100.108.74.26",
|
|
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
|
},
|
|
"user-kris": {
|
|
"hostname": "user-kris",
|
|
"tags": [],
|
|
"ipv4": "100.110.121.96",
|
|
"ipv6": "fd7a:115c:a1e0::1737:7960"
|
|
},
|
|
"user-mon": {
|
|
"hostname": "user-mon",
|
|
"tags": [],
|
|
"ipv4": "100.103.90.82",
|
|
"ipv6": "fd7a:115c:a1e0::9e37:5a52"
|
|
},
|
|
"user1": {
|
|
"hostname": "user1",
|
|
"tags": [],
|
|
"ipv4": "100.90.199.68",
|
|
"ipv6": "fd7a:115c:a1e0::2d01:c747"
|
|
}
|
|
}
|
|
},
|
|
"captures": {
|
|
"exit-node": {
|
|
"packet_filter_rules": [
|
|
{
|
|
"SrcIPs": [
|
|
"100.103.8.15",
|
|
"100.108.74.26",
|
|
"100.83.200.69",
|
|
"100.85.66.106",
|
|
"100.92.142.61",
|
|
"fd7a:115c:a1e0::3e37:8e3d",
|
|
"fd7a:115c:a1e0::5b37:80f",
|
|
"fd7a:115c:a1e0::7c37:426a",
|
|
"fd7a:115c:a1e0::b901:4a87",
|
|
"fd7a:115c:a1e0::c537:c845"
|
|
],
|
|
"DstPorts": [
|
|
{
|
|
"IP": "*",
|
|
"Ports": {
|
|
"First": 0,
|
|
"Last": 65535
|
|
}
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"subnet-router": {
|
|
"packet_filter_rules": [
|
|
{
|
|
"SrcIPs": [
|
|
"100.103.8.15",
|
|
"100.108.74.26",
|
|
"100.83.200.69",
|
|
"100.85.66.106",
|
|
"100.92.142.61",
|
|
"fd7a:115c:a1e0::3e37:8e3d",
|
|
"fd7a:115c:a1e0::5b37:80f",
|
|
"fd7a:115c:a1e0::7c37:426a",
|
|
"fd7a:115c:a1e0::b901:4a87",
|
|
"fd7a:115c:a1e0::c537:c845"
|
|
],
|
|
"DstPorts": [
|
|
{
|
|
"IP": "*",
|
|
"Ports": {
|
|
"First": 0,
|
|
"Last": 65535
|
|
}
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"tagged-client": {
|
|
"packet_filter_rules": [
|
|
{
|
|
"SrcIPs": [
|
|
"100.103.8.15",
|
|
"100.108.74.26",
|
|
"100.83.200.69",
|
|
"100.85.66.106",
|
|
"100.92.142.61",
|
|
"fd7a:115c:a1e0::3e37:8e3d",
|
|
"fd7a:115c:a1e0::5b37:80f",
|
|
"fd7a:115c:a1e0::7c37:426a",
|
|
"fd7a:115c:a1e0::b901:4a87",
|
|
"fd7a:115c:a1e0::c537:c845"
|
|
],
|
|
"DstPorts": [
|
|
{
|
|
"IP": "*",
|
|
"Ports": {
|
|
"First": 0,
|
|
"Last": 65535
|
|
}
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"tagged-prod": {
|
|
"packet_filter_rules": [
|
|
{
|
|
"SrcIPs": [
|
|
"100.103.8.15",
|
|
"100.108.74.26",
|
|
"100.83.200.69",
|
|
"100.85.66.106",
|
|
"100.92.142.61",
|
|
"fd7a:115c:a1e0::3e37:8e3d",
|
|
"fd7a:115c:a1e0::5b37:80f",
|
|
"fd7a:115c:a1e0::7c37:426a",
|
|
"fd7a:115c:a1e0::b901:4a87",
|
|
"fd7a:115c:a1e0::c537:c845"
|
|
],
|
|
"DstPorts": [
|
|
{
|
|
"IP": "*",
|
|
"Ports": {
|
|
"First": 0,
|
|
"Last": 65535
|
|
}
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"tagged-server": {
|
|
"packet_filter_rules": [
|
|
{
|
|
"SrcIPs": [
|
|
"100.103.8.15",
|
|
"100.108.74.26",
|
|
"100.83.200.69",
|
|
"100.85.66.106",
|
|
"100.92.142.61",
|
|
"fd7a:115c:a1e0::3e37:8e3d",
|
|
"fd7a:115c:a1e0::5b37:80f",
|
|
"fd7a:115c:a1e0::7c37:426a",
|
|
"fd7a:115c:a1e0::b901:4a87",
|
|
"fd7a:115c:a1e0::c537:c845"
|
|
],
|
|
"DstPorts": [
|
|
{
|
|
"IP": "*",
|
|
"Ports": {
|
|
"First": 0,
|
|
"Last": 65535
|
|
}
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"user-kris": {
|
|
"packet_filter_rules": [
|
|
{
|
|
"SrcIPs": [
|
|
"100.103.8.15",
|
|
"100.108.74.26",
|
|
"100.83.200.69",
|
|
"100.85.66.106",
|
|
"100.92.142.61",
|
|
"fd7a:115c:a1e0::3e37:8e3d",
|
|
"fd7a:115c:a1e0::5b37:80f",
|
|
"fd7a:115c:a1e0::7c37:426a",
|
|
"fd7a:115c:a1e0::b901:4a87",
|
|
"fd7a:115c:a1e0::c537:c845"
|
|
],
|
|
"DstPorts": [
|
|
{
|
|
"IP": "*",
|
|
"Ports": {
|
|
"First": 0,
|
|
"Last": 65535
|
|
}
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"user-mon": {
|
|
"packet_filter_rules": [
|
|
{
|
|
"SrcIPs": [
|
|
"100.103.8.15",
|
|
"100.108.74.26",
|
|
"100.83.200.69",
|
|
"100.85.66.106",
|
|
"100.92.142.61",
|
|
"fd7a:115c:a1e0::3e37:8e3d",
|
|
"fd7a:115c:a1e0::5b37:80f",
|
|
"fd7a:115c:a1e0::7c37:426a",
|
|
"fd7a:115c:a1e0::b901:4a87",
|
|
"fd7a:115c:a1e0::c537:c845"
|
|
],
|
|
"DstPorts": [
|
|
{
|
|
"IP": "*",
|
|
"Ports": {
|
|
"First": 0,
|
|
"Last": 65535
|
|
}
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"user1": {
|
|
"packet_filter_rules": [
|
|
{
|
|
"SrcIPs": [
|
|
"100.103.8.15",
|
|
"100.108.74.26",
|
|
"100.83.200.69",
|
|
"100.85.66.106",
|
|
"100.92.142.61",
|
|
"fd7a:115c:a1e0::3e37:8e3d",
|
|
"fd7a:115c:a1e0::5b37:80f",
|
|
"fd7a:115c:a1e0::7c37:426a",
|
|
"fd7a:115c:a1e0::b901:4a87",
|
|
"fd7a:115c:a1e0::c537:c845"
|
|
],
|
|
"DstPorts": [
|
|
{
|
|
"IP": "*",
|
|
"Ports": {
|
|
"First": 0,
|
|
"Last": 65535
|
|
}
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|