3 Commits

Author	SHA1	Message	Date
Kristoffer Dalby	aa68fbafc0	hscontrol/policy/v2: add 25 v2 gap-filling grant testdata files ... Add GRANT-V01 through GRANT-V25 JSON files captured from Tailscale SaaS to fill coverage gaps in the grants compatibility test suite. These tests cover: - App grants on specific tags (not just wildcards) - Mixed ip+app grants on specific tags - Via routes with specific src identities (tags, groups, members) - Via with multiple dst subnets and multiple via tags - Drive cap with reverse drive-sharer generation - autogroup:self with app grants - autogroup:internet rejection with app grants - Raw default route CIDR (0.0.0.0/0, ::/0) rejection as grant dst Updates #2180	2026-03-25 15:17:23 +00:00
Kristoffer Dalby	f1756f4d12	hscontrol/policy/v2: add grants compatibility testdata (212 JSON files) ... Add 212 GRANT-*.json test files captured from Tailscale SaaS to testdata/grant_results/. Each file contains a policy with grants, the expected packet_filter_rules for 8 test nodes, and the topology used during capture. These files serve as the ground truth for the data-driven grants compatibility test. Updates #2180	2026-03-25 15:17:22 +00:00
Kristoffer Dalby	6c59d3e601	policy/v2: add SSH compatibility testdata from Tailscale SaaS ... Add 39 test fixtures captured from Tailscale SaaS API responses to validate SSH policy compilation parity. Each JSON file contains the SSH policy section and expected compiled SSHRule arrays for 5 test nodes (3 user-owned, 2 tagged). Test series: SSH-A (basic), SSH-B (specific sources), SSH-C (destination combos), SSH-D (localpart), SSH-E (edge cases), SSH-F (multi-rule), SSH-G (acceptEnv). The data-driven TestSSHDataCompat harness uses cmp.Diff with principal order tolerance but strict rule ordering (first-match-wins semantics require exact order). Updates #3049	2026-02-28 05:14:11 -08:00