headscale/hscontrol/policy/v2/testdata/grant_results/GRANT-V04.hujson

// GRANT-V04
//
// Grant:  src=['*'] dst=['0.0.0.0/0'] app={example.com/cap/global-access}
//
// Expected: Error (HTTP 400) — dst "0.0.0.0/0": to allow all IP addresses, use "*" or "autogroup:internet"
{
  "test_id": "GRANT-V04",
  "error": true,
  "input": {
    "full_policy": {
      "groups": {
        "group:admins": [
          "kratail2tid@passkey"
        ],
        "group:developers": [
          "kristoffer@dalby.cc",
          "kratail2tid@passkey"
        ],
        "group:monitors": [
          "monitorpasskeykradalby@passkey"
        ],
        "group:empty": []
      },
      "tagOwners": {
        "tag:server": [
          "kratail2tid@passkey"
        ],
        "tag:prod": [
          "kratail2tid@passkey"
        ],
        "tag:client": [
          "kratail2tid@passkey"
        ],
        "tag:router": [
          "kratail2tid@passkey"
        ],
        "tag:exit": [
          "kratail2tid@passkey"
        ]
      },
      "hosts": {
        "webserver": "100.108.74.26",
        "prodbox": "100.103.8.15",
        "internal": "10.0.0.0/8"
      },
      "autoApprovers": {
        "routes": {
          "10.33.0.0/16": [
            "tag:router"
          ],
          "0.0.0.0/0": [
            "tag:exit"
          ],
          "::/0": [
            "tag:exit"
          ]
        }
      },
      "grants": [
        {
          "src": [
            "*"
          ],
          "dst": [
            "0.0.0.0/0"
          ],
          "app": {
            "example.com/cap/global-access": [
              {}
            ]
          }
        }
      ]
    },
    "api_response_code": 400,
    "api_response_body": {
      "message": "dst \"0.0.0.0/0\": to allow all IP addresses, use \"*\" or \"autogroup:internet\""
    }
  }
}