rsp2k/headscale
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
headscale/hscontrol/policy/v2/testdata/grant_results/GRANT-V14.hujson

332 lines
7.1 KiB
Text
Raw Normal View History

testdata: convert .json to .hujson with header comments Rename all 594 test data files from .json to .hujson and add descriptive header comments to each file documenting what policy rules are under test and what outcome is expected. Update test loaders in all 5 _test.go files to parse HuJSON via hujson.Parse/Standardize/Pack before json.Unmarshal. Add cross-dependency warning to via_compat_test.go documenting that GRANT-V29/V30/V31/V36 are shared with TestGrantsCompat. Add .gitignore exemption for testdata HuJSON files.
2026-03-30 17:08:26 +00:00
// GRANT-V14
//
// Grant: src=['tag:client'] dst=['autogroup:internet'] via=['tag:exit'] ip=['*']
//
// Expected: No filter rules on any node
policy/v2: add data-driven grants compatibility test with Tailscale SaaS captures Rename tailscale_compat_test.go to tailscale_acl_compat_test.go to make room for the grants compat test. Add 237 GRANT-*.json golden test files captured from Tailscale SaaS and a data-driven test driver that compares headscale's grant filter compilation against real Tailscale behavior. Updates #2180
2026-02-23 15:39:54 +00:00
{
"test_id": "GRANT-V14",
"input": {
"full_policy": {
"groups": {
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"group:admins": [
"kratail2tid@passkey"
],
"group:developers": [
"kristoffer@dalby.cc",
"kratail2tid@passkey"
],
"group:monitors": [
"monitorpasskeykradalby@passkey"
],
policy/v2: add data-driven grants compatibility test with Tailscale SaaS captures Rename tailscale_compat_test.go to tailscale_acl_compat_test.go to make room for the grants compat test. Add 237 GRANT-*.json golden test files captured from Tailscale SaaS and a data-driven test driver that compares headscale's grant filter compilation against real Tailscale behavior. Updates #2180
2026-02-23 15:39:54 +00:00
"group:empty": []
},
"tagOwners": {
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tag:server": [
"kratail2tid@passkey"
],
"tag:prod": [
"kratail2tid@passkey"
],
"tag:client": [
"kratail2tid@passkey"
],
"tag:router": [
"kratail2tid@passkey"
],
"tag:exit": [
"kratail2tid@passkey"
],
"tag:exit-a": [
"kratail2tid@passkey"
],
"tag:exit-b": [
"kratail2tid@passkey"
],
"tag:group-a": [
"kratail2tid@passkey"
],
"tag:group-b": [
"kratail2tid@passkey"
],
"tag:router-a": [
"kratail2tid@passkey"
],
"tag:router-b": [
"kratail2tid@passkey"
]
policy/v2: add data-driven grants compatibility test with Tailscale SaaS captures Rename tailscale_compat_test.go to tailscale_acl_compat_test.go to make room for the grants compat test. Add 237 GRANT-*.json golden test files captured from Tailscale SaaS and a data-driven test driver that compares headscale's grant filter compilation against real Tailscale behavior. Updates #2180
2026-02-23 15:39:54 +00:00
},
"hosts": {
"webserver": "100.108.74.26",
"prodbox": "100.103.8.15",
"internal": "10.0.0.0/8"
},
"autoApprovers": {
"routes": {
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"10.33.0.0/16": [
"tag:router"
],
"10.44.0.0/16": [
"tag:router-a"
],
"10.55.0.0/16": [
"tag:router-b"
],
"0.0.0.0/0": [
"tag:exit",
"tag:exit-a",
"tag:exit-b"
],
"::/0": [
"tag:exit",
"tag:exit-a",
"tag:exit-b"
]
policy/v2: add data-driven grants compatibility test with Tailscale SaaS captures Rename tailscale_compat_test.go to tailscale_acl_compat_test.go to make room for the grants compat test. Add 237 GRANT-*.json golden test files captured from Tailscale SaaS and a data-driven test driver that compares headscale's grant filter compilation against real Tailscale behavior. Updates #2180
2026-02-23 15:39:54 +00:00
}
},
"grants": [
{
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"src": [
"tag:client"
],
"dst": [
"autogroup:internet"
],
"via": [
"tag:exit"
],
"ip": [
"*"
]
policy/v2: add data-driven grants compatibility test with Tailscale SaaS captures Rename tailscale_compat_test.go to tailscale_acl_compat_test.go to make room for the grants compat test. Add 237 GRANT-*.json golden test files captured from Tailscale SaaS and a data-driven test driver that compares headscale's grant filter compilation against real Tailscale behavior. Updates #2180
2026-02-23 15:39:54 +00:00
}
]
},
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
"api_response_code": 200
},
"topology": {
"nodes": {
"exit-a": {
"hostname": "exit-a",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:exit-a"
],
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
"ipv4": "100.124.195.93",
"ipv6": "fd7a:115c:a1e0::7837:c35d"
},
"exit-b": {
"hostname": "exit-b",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:exit-b"
],
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
"ipv4": "100.116.18.24",
"ipv6": "fd7a:115c:a1e0::ff37:1218"
},
"exit-node": {
"hostname": "exit-node",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:exit"
],
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
"ipv4": "100.85.66.106",
"ipv6": "fd7a:115c:a1e0::7c37:426a"
},
"group-a-client": {
"hostname": "group-a-client",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:group-a"
],
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
"ipv4": "100.107.162.14",
"ipv6": "fd7a:115c:a1e0::a237:a20e"
},
"group-b-client": {
"hostname": "group-b-client",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:group-b"
],
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
"ipv4": "100.77.135.18",
"ipv6": "fd7a:115c:a1e0::4b37:8712"
},
"multi-exit-router": {
"hostname": "multi-exit-router",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:exit",
"tag:router"
],
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
"ipv4": "100.105.127.107",
"ipv6": "fd7a:115c:a1e0::ad37:7f6b"
},
"router-a": {
"hostname": "router-a",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:router-a"
],
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
"ipv4": "100.109.43.124",
"ipv6": "fd7a:115c:a1e0::a537:2b7c"
},
"router-b": {
"hostname": "router-b",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:router-b"
],
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
"ipv4": "100.65.172.123",
"ipv6": "fd7a:115c:a1e0::5a37:ac7c"
},
"subnet-router": {
"hostname": "subnet-router",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:router"
],
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
"ipv4": "100.92.142.61",
"ipv6": "fd7a:115c:a1e0::3e37:8e3d"
},
"tagged-client": {
"hostname": "tagged-client",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:client"
],
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
"ipv4": "100.83.200.69",
"ipv6": "fd7a:115c:a1e0::c537:c845"
},
"tagged-prod": {
"hostname": "tagged-prod",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:prod"
],
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
"ipv4": "100.103.8.15",
"ipv6": "fd7a:115c:a1e0::5b37:80f"
},
"tagged-server": {
"hostname": "tagged-server",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:server"
],
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
"ipv4": "100.108.74.26",
"ipv6": "fd7a:115c:a1e0::b901:4a87"
},
"user-kris": {
"hostname": "user-kris",
"tags": [],
"ipv4": "100.110.121.96",
"ipv6": "fd7a:115c:a1e0::1737:7960"
},
"user-mon": {
"hostname": "user-mon",
"tags": [],
"ipv4": "100.103.90.82",
"ipv6": "fd7a:115c:a1e0::9e37:5a52"
},
"user1": {
"hostname": "user1",
"tags": [],
"ipv4": "100.90.199.68",
"ipv6": "fd7a:115c:a1e0::2d01:c747"
}
}
},
"captures": {
"exit-a": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
},
"exit-b": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
},
"exit-node": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
},
"group-a-client": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
},
"group-b-client": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
},
"multi-exit-router": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
},
"router-a": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
},
"router-b": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
},
"subnet-router": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
},
"tagged-client": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
},
"tagged-prod": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
},
"tagged-server": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
},
"user-kris": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
},
"user-mon": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
},
"user1": {
"packet_filter_rules": null,
"netmap": {
"Peers": [],
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"PacketFilterRules": null
policy/v2: add via exit steering golden captures and tests Add golden test data for via exit route steering and fix via exit grant compilation to match Tailscale SaaS behavior. Includes MapResponse golden tests for via grant route steering verification. Updates #2180
2026-03-28 11:05:16 +00:00
}
policy/v2: add data-driven grants compatibility test with Tailscale SaaS captures Rename tailscale_compat_test.go to tailscale_acl_compat_test.go to make room for the grants compat test. Add 237 GRANT-*.json golden test files captured from Tailscale SaaS and a data-driven test driver that compares headscale's grant filter compilation against real Tailscale behavior. Updates #2180
2026-02-23 15:39:54 +00:00
}
}
}
Reference in a new issue Copy permalink