mirror of
https://github.com/juanfont/headscale.git
synced 2026-04-23 00:58:43 +02:00
0fa9dcaff8
Rename tailscale_compat_test.go to tailscale_acl_compat_test.go to make room for the grants compat test. Add 237 GRANT-*.json golden test files captured from Tailscale SaaS and a data-driven test driver that compares headscale's grant filter compilation against real Tailscale behavior. Updates #2180
62 lines
1.7 KiB
JSON
62 lines
1.7 KiB
JSON
{
|
|
"test_id": "GRANT-E3",
|
|
"description": "",
|
|
"timestamp": "2026-02-23T00:32:23Z",
|
|
"error": true,
|
|
"input": {
|
|
"policy_file": "/home/kradalby/acl-explore/grant_policies/grant_e3.json",
|
|
"full_policy": {
|
|
"groups": {
|
|
"group:admins": ["kratail2tid@passkey"],
|
|
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
|
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
|
"group:empty": []
|
|
},
|
|
"tagOwners": {
|
|
"tag:server": ["kratail2tid@passkey"],
|
|
"tag:prod": ["kratail2tid@passkey"],
|
|
"tag:client": ["kratail2tid@passkey"],
|
|
"tag:router": ["kratail2tid@passkey"],
|
|
"tag:exit": ["kratail2tid@passkey"]
|
|
},
|
|
"hosts": {
|
|
"webserver": "100.108.74.26",
|
|
"prodbox": "100.103.8.15",
|
|
"internal": "10.0.0.0/8"
|
|
},
|
|
"autoApprovers": {
|
|
"routes": {
|
|
"10.33.0.0/16": ["tag:router"],
|
|
"0.0.0.0/0": ["tag:exit"],
|
|
"::/0": ["tag:exit"]
|
|
}
|
|
},
|
|
"grants": [
|
|
{
|
|
"src": ["*"],
|
|
"dst": ["autogroup:self"],
|
|
"app": {
|
|
"tailscale.com/cap/drive": [
|
|
{
|
|
"shares": ["*"],
|
|
"access": "rw"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"grants_section": [
|
|
{
|
|
"src": ["*"],
|
|
"dst": ["autogroup:self"],
|
|
"app": { "tailscale.com/cap/drive": [{ "shares": ["*"], "access": "rw" }] }
|
|
}
|
|
],
|
|
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
|
"api_method": "POST",
|
|
"api_response_code": 400,
|
|
"api_response_body": { "message": "autogroup:self can only be used with users, groups, or supported autogroups" }
|
|
}
|
|
}
|