headscale

mirror of https://github.com/juanfont/headscale.git synced 2026-04-11 03:27:20 +02:00

Files

Kristoffer Dalby 28be15f8ea policy/v2: handle autogroup:internet in via grant compilation

compileViaGrant only handled *Prefix destinations, skipping
*AutoGroup entirely. This meant via grants with
dst=[autogroup:internet] produced no filter rules even when the
node was an exit node with approved exit routes.

Switch the destination loop from a type assertion to a type switch
that handles both *Prefix (subnet routes) and *AutoGroup (exit
routes via autogroup:internet). Also check ExitRoutes() in
addition to SubnetRoutes() so the function doesn't bail early
when a node only has exit routes.

Updates #2180

2026-04-01 14:10:42 +01:00

testdata

policy/v2: add advertised routes to compat test topologies

2026-04-01 14:10:42 +01:00

filter_test.go

policy/v2: use bare IPs in autogroup:self DstPorts

2026-04-01 14:10:42 +01:00

filter.go

policy/v2: handle autogroup:internet in via grant compilation

2026-04-01 14:10:42 +01:00

main_test.go

all: fix test flakiness and improve test infrastructure