Kristoffer Dalby 84210c03bb policy/v2: accept empty grant sources and destinations ...

Tailscale SaaS accepts grants with empty src=[] or dst=[] arrays,
producing no filter rules for any node. Headscale previously rejected
these with validation errors.

Remove the empty source/destination validation checks and add an
early return in compileGrantWithAutogroupSelf when the grant has
literally empty Sources or Destinations arrays. This is distinct
from sources that resolve to empty (e.g., group:empty) where
Tailscale still produces CapGrant rules with empty SrcIPs.

Updates #2180

2026-03-25 15:17:23 +00:00

..

matcher

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00

policyutil

policy/v2: implement CapGrant compilation with companion capabilities

2026-03-25 15:17:23 +00:00

v2

policy/v2: accept empty grant sources and destinations

2026-03-25 15:17:23 +00:00

pm.go

state, policy, noise: implement SSH check period auto-approval

2026-02-25 21:28:05 +01:00

policy_autoapprove_test.go

hscontrol/policy: fix test assertions and expectations

2026-03-25 15:17:23 +00:00

policy_route_approval_test.go

all: apply golangci-lint 2.9.0 fixes

2026-02-19 08:21:23 +01:00

policy_test.go

policy/v2: add localpart:*@domain SSH user compilation

2026-02-28 05:14:11 -08:00

policy.go

all: upgrade to Go 1.26rc2 and modernize codebase

2026-02-08 12:35:23 +01:00

route_approval_test.go

all: upgrade to Go 1.26rc2 and modernize codebase

2026-02-08 12:35:23 +01:00