headscale

mirror of https://github.com/juanfont/headscale.git synced 2026-04-11 03:27:20 +02:00

Files

Kristoffer Dalby 5830eabf09 hscontrol/policy: fix test assertions and expectations

Fix several test issues exposed by the ResolvedAddresses refactor:

- TestTagUserMutualExclusivity: remove incorrect ACL rule that was
  testing the wrong invariant. The test now correctly validates that
  without an explicit cross-identity grant, user-owned nodes cannot
  reach tagged nodes. Add TestUserToTagCrossIdentityGrant to verify
  that explicit user@ -> tag:X ACL rules produce valid filter rules.

- TestResolvePolicy/wildcard-alias: update expected prefixes to match
  the CGNAT range minus ChromeOS VM range (multiple prefixes instead
  of the encompassing 100.64.0.0/10).

- TestApproveRoutesWithPolicy: fix user Name fields from "testuser@"
  to "testuser" to match how resolveUser trims the @ suffix before
  comparing against stored names.

Updates #2180

2026-03-25 15:17:23 +00:00

matcher

all: fix golangci-lint issues (#3064 )

2026-02-06 21:45:32 +01:00

policyutil

hscontrol/policy/v2: recategorize grants skip list from SRCIPS_FORMAT into granular root causes

2026-03-25 15:17:23 +00:00

hscontrol/policy: fix test assertions and expectations

2026-03-25 15:17:23 +00:00

pm.go

state, policy, noise: implement SSH check period auto-approval

2026-02-25 21:28:05 +01:00