headscale/hscontrol/policy/v2/testdata/ssh_results/SSH-C4.hujson

// SSH-C4
//
// SSH:  accept: src=['autogroup:member'] dst=['tag:server', 'tag:prod'] users=['root']
//
// Expected: SSH rules on 2 of 5 nodes
{
  "test_id": "SSH-C4",
  "policy_file": "ssh_policies/ssh_c4.json",
  "ssh_section": [
    { "action": "accept", "src": ["autogroup:member"], "dst": ["tag:server", "tag:prod"], "users": ["root"] }
  ],
  "nodes": {
    "user1": { "rules": [] },
    "user-kris": { "rules": [] },
    "user-mon": { "rules": [] },
    "tagged-server": {
      "rules": [
        {
          "principals": [
            { "nodeIP": "100.103.90.82" },
            { "nodeIP": "100.110.121.96" },
            { "nodeIP": "100.90.199.68" },
            { "nodeIP": "fd7a:115c:a1e0::1737:7960" },
            { "nodeIP": "fd7a:115c:a1e0::2d01:c747" },
            { "nodeIP": "fd7a:115c:a1e0::9e37:5a52" }
          ],
          "sshUsers": { "root": "root" },
          "action": {
            "accept": true,
            "allowAgentForwarding": true,
            "allowLocalPortForwarding": true,
            "allowRemotePortForwarding": true
          }
        }
      ]
    },
    "tagged-prod": {
      "rules": [
        {
          "principals": [
            { "nodeIP": "100.103.90.82" },
            { "nodeIP": "100.110.121.96" },
            { "nodeIP": "100.90.199.68" },
            { "nodeIP": "fd7a:115c:a1e0::1737:7960" },
            { "nodeIP": "fd7a:115c:a1e0::2d01:c747" },
            { "nodeIP": "fd7a:115c:a1e0::9e37:5a52" }
          ],
          "sshUsers": { "root": "root" },
          "action": {
            "accept": true,
            "allowAgentForwarding": true,
            "allowLocalPortForwarding": true,
            "allowRemotePortForwarding": true
          }
        }
      ]
    }
  }
}