mirror of
https://github.com/juanfont/headscale.git
synced 2026-04-11 03:27:20 +02:00
Add TestGrantsCompat, a data-driven test that validates headscale's grants implementation against 212 test cases captured from Tailscale SaaS. Each test case loads a GRANT-*.json file from testdata/, applies the policy through headscale's engine, and compares the resulting packet filter rules against Tailscale's actual output. Currently 19 tests pass and 193 are skipped with documented reasons: - SRCIPS_FORMAT (125): IP range formatting differences - CAPGRANT_COMPILATION (41): app capability grants not yet compiled - ERROR_VALIDATION_GAP (14): validation strictness differences - CAPGRANT_AND_SRCIPS_FORMAT (9): combined ip+app grant issues - VIA_AND_SRCIPS_FORMAT (4): via route compilation not implemented - AUTOGROUP_DANGER_ALL (3): autogroup:danger-all not supported - VALIDATION_STRICTNESS (2): empty src/dst array handling Updates #2180