rsp2k/headscale
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
headscale/hscontrol/policy/v2/testdata/routes_results/ROUTES-g8_default_ipproto.hujson

297 lines
6.4 KiB
Text
Raw Normal View History

testdata: convert .json to .hujson with header comments Rename all 594 test data files from .json to .hujson and add descriptive header comments to each file documenting what policy rules are under test and what outcome is expected. Update test loaders in all 5 _test.go files to parse HuJSON via hujson.Parse/Standardize/Pack before json.Unmarshal. Add cross-dependency warning to via_compat_test.go documenting that GRANT-V29/V30/V31/V36 are shared with TestGrantsCompat. Add .gitignore exemption for testdata HuJSON files.
2026-03-30 17:08:26 +00:00
// ROUTES-g8_default_ipproto
//
// ACL: accept: src=['*'] dst=['10.33.0.0/16:22']
//
// Routers: 6 nodes with routes
//
// Expected: Rules on 2 of 12 nodes
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
{
"test_id": "ROUTES-g8_default_ipproto",
"input": {
"full_policy": {
"groups": {
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"group:admins": [
"kratail2tid@passkey"
],
"group:developers": [
"kristoffer@dalby.cc",
"kratail2tid@passkey"
],
"group:monitors": [
"monitorpasskeykradalby@passkey"
],
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
"group:empty": []
},
"tagOwners": {
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tag:server": [
"kratail2tid@passkey"
],
"tag:prod": [
"kratail2tid@passkey"
],
"tag:client": [
"kratail2tid@passkey"
],
"tag:router": [
"kratail2tid@passkey"
],
"tag:exit": [
"kratail2tid@passkey"
],
"tag:ha": [
"kratail2tid@passkey"
]
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
},
"hosts": {
"webserver": "100.108.74.26",
"prodbox": "100.103.8.15",
"internal": "10.0.0.0/8",
"subnet24": "192.168.1.0/24"
},
"autoApprovers": {
"routes": {
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"10.0.0.0/8": [
"tag:router"
],
"172.16.0.0/12": [
"tag:router"
],
"192.168.0.0/16": [
"tag:ha"
],
"0.0.0.0/0": [
"tag:exit"
],
"::/0": [
"tag:exit"
]
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
}
},
"acls": [
{
"action": "accept",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"src": [
"*"
],
"dst": [
"10.33.0.0/16:22"
]
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
}
]
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
}
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
},
"topology": {
"nodes": {
"big-router": {
"hostname": "big-router",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:router"
],
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
"ipv4": "100.97.174.21",
policy/v2: add advertised routes to compat test topologies Add routable_ips and approved_routes fields to the node topology definitions in all golden test files. These represent the subnet routes actually advertised by nodes on the Tailscale SaaS network during data capture: Routes topology (92 files, 6 router nodes): big-router: 10.0.0.0/8 subnet-router: 10.33.0.0/16 ha-router1: 192.168.1.0/24 ha-router2: 192.168.1.0/24 multi-router: 172.16.0.0/24 exit-node: 0.0.0.0/0, ::/0 ACL topology (199 files, 1 router node): subnet-router: 10.33.0.0/16 Grants topology (203 files, 1 router node): subnet-router: 10.33.0.0/16 The route assignments were deduced from the golden data by analyzing which router nodes receive FilterRules for which destination CIDRs across all test files, and cross-referenced with the MTS setup script (setup_grant_nodes.sh). Updates #2180
2026-03-18 13:40:19 +00:00
"ipv6": "fd7a:115c:a1e0::5137:ae15",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"routable_ips": [
"10.0.0.0/8"
],
"approved_routes": [
"10.0.0.0/8"
]
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
},
"exit-node": {
"hostname": "exit-node",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:exit"
],
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
"ipv4": "100.85.66.106",
policy/v2: add advertised routes to compat test topologies Add routable_ips and approved_routes fields to the node topology definitions in all golden test files. These represent the subnet routes actually advertised by nodes on the Tailscale SaaS network during data capture: Routes topology (92 files, 6 router nodes): big-router: 10.0.0.0/8 subnet-router: 10.33.0.0/16 ha-router1: 192.168.1.0/24 ha-router2: 192.168.1.0/24 multi-router: 172.16.0.0/24 exit-node: 0.0.0.0/0, ::/0 ACL topology (199 files, 1 router node): subnet-router: 10.33.0.0/16 Grants topology (203 files, 1 router node): subnet-router: 10.33.0.0/16 The route assignments were deduced from the golden data by analyzing which router nodes receive FilterRules for which destination CIDRs across all test files, and cross-referenced with the MTS setup script (setup_grant_nodes.sh). Updates #2180
2026-03-18 13:40:19 +00:00
"ipv6": "fd7a:115c:a1e0::7c37:426a",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"routable_ips": [
"0.0.0.0/0",
"::/0"
],
"approved_routes": [
"0.0.0.0/0",
"::/0"
]
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
},
"ha-router1": {
"hostname": "ha-router1",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:ha"
],
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
"ipv4": "100.121.186.70",
policy/v2: add advertised routes to compat test topologies Add routable_ips and approved_routes fields to the node topology definitions in all golden test files. These represent the subnet routes actually advertised by nodes on the Tailscale SaaS network during data capture: Routes topology (92 files, 6 router nodes): big-router: 10.0.0.0/8 subnet-router: 10.33.0.0/16 ha-router1: 192.168.1.0/24 ha-router2: 192.168.1.0/24 multi-router: 172.16.0.0/24 exit-node: 0.0.0.0/0, ::/0 ACL topology (199 files, 1 router node): subnet-router: 10.33.0.0/16 Grants topology (203 files, 1 router node): subnet-router: 10.33.0.0/16 The route assignments were deduced from the golden data by analyzing which router nodes receive FilterRules for which destination CIDRs across all test files, and cross-referenced with the MTS setup script (setup_grant_nodes.sh). Updates #2180
2026-03-18 13:40:19 +00:00
"ipv6": "fd7a:115c:a1e0::6737:ba46",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"routable_ips": [
"192.168.1.0/24"
],
"approved_routes": [
"192.168.1.0/24"
]
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
},
"ha-router2": {
"hostname": "ha-router2",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:ha"
],
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
"ipv4": "100.117.104.82",
policy/v2: add advertised routes to compat test topologies Add routable_ips and approved_routes fields to the node topology definitions in all golden test files. These represent the subnet routes actually advertised by nodes on the Tailscale SaaS network during data capture: Routes topology (92 files, 6 router nodes): big-router: 10.0.0.0/8 subnet-router: 10.33.0.0/16 ha-router1: 192.168.1.0/24 ha-router2: 192.168.1.0/24 multi-router: 172.16.0.0/24 exit-node: 0.0.0.0/0, ::/0 ACL topology (199 files, 1 router node): subnet-router: 10.33.0.0/16 Grants topology (203 files, 1 router node): subnet-router: 10.33.0.0/16 The route assignments were deduced from the golden data by analyzing which router nodes receive FilterRules for which destination CIDRs across all test files, and cross-referenced with the MTS setup script (setup_grant_nodes.sh). Updates #2180
2026-03-18 13:40:19 +00:00
"ipv6": "fd7a:115c:a1e0::7437:6852",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"routable_ips": [
"192.168.1.0/24"
],
"approved_routes": [
"192.168.1.0/24"
]
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
},
"multi-router": {
"hostname": "multi-router",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:exit",
"tag:router"
],
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
"ipv4": "100.119.241.111",
policy/v2: add advertised routes to compat test topologies Add routable_ips and approved_routes fields to the node topology definitions in all golden test files. These represent the subnet routes actually advertised by nodes on the Tailscale SaaS network during data capture: Routes topology (92 files, 6 router nodes): big-router: 10.0.0.0/8 subnet-router: 10.33.0.0/16 ha-router1: 192.168.1.0/24 ha-router2: 192.168.1.0/24 multi-router: 172.16.0.0/24 exit-node: 0.0.0.0/0, ::/0 ACL topology (199 files, 1 router node): subnet-router: 10.33.0.0/16 Grants topology (203 files, 1 router node): subnet-router: 10.33.0.0/16 The route assignments were deduced from the golden data by analyzing which router nodes receive FilterRules for which destination CIDRs across all test files, and cross-referenced with the MTS setup script (setup_grant_nodes.sh). Updates #2180
2026-03-18 13:40:19 +00:00
"ipv6": "fd7a:115c:a1e0::3337:f16f",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"routable_ips": [
"172.16.0.0/24"
],
"approved_routes": [
"172.16.0.0/24"
]
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
},
"subnet-router": {
"hostname": "subnet-router",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:router"
],
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
"ipv4": "100.92.142.61",
policy/v2: add advertised routes to compat test topologies Add routable_ips and approved_routes fields to the node topology definitions in all golden test files. These represent the subnet routes actually advertised by nodes on the Tailscale SaaS network during data capture: Routes topology (92 files, 6 router nodes): big-router: 10.0.0.0/8 subnet-router: 10.33.0.0/16 ha-router1: 192.168.1.0/24 ha-router2: 192.168.1.0/24 multi-router: 172.16.0.0/24 exit-node: 0.0.0.0/0, ::/0 ACL topology (199 files, 1 router node): subnet-router: 10.33.0.0/16 Grants topology (203 files, 1 router node): subnet-router: 10.33.0.0/16 The route assignments were deduced from the golden data by analyzing which router nodes receive FilterRules for which destination CIDRs across all test files, and cross-referenced with the MTS setup script (setup_grant_nodes.sh). Updates #2180
2026-03-18 13:40:19 +00:00
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"routable_ips": [
"10.33.0.0/16"
],
"approved_routes": [
"10.33.0.0/16"
]
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
},
"tagged-client": {
"hostname": "tagged-client",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:client"
],
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
"ipv4": "100.83.200.69",
"ipv6": "fd7a:115c:a1e0::c537:c845"
},
"tagged-prod": {
"hostname": "tagged-prod",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:prod"
],
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
"ipv4": "100.103.8.15",
"ipv6": "fd7a:115c:a1e0::5b37:80f"
},
"tagged-server": {
"hostname": "tagged-server",
testdata: strip unused fields from all test data files (23MB -> 4MB) Strip fields not consumed by any test from all 594 HuJSON test data files: grant_results/ (248 files, 21MB -> 1.8MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.grants_section, input.api_endpoint, input.api_method, topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id, captures.commands, captures.packet_filter_matches, captures.whois - V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes + PacketFilterRules) for via_compat_test.go compatibility - V17-V25: strip netmap (old topology, incompatible with via_compat harness) acl_results/ (215 files, 1.4MB -> 1.2MB): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code, entire topology section (parsed by Go struct but completely ignored — nodes are hardcoded) routes_results/ (92 files, unchanged — topology is actively used): - Remove: timestamp, propagation_wait_seconds, input.policy_file, input.api_endpoint, input.api_response_code ssh_results/ (39 files, unchanged — minimal to begin with): - Remove: policy_file
2026-03-30 17:10:53 +00:00
"tags": [
"tag:server"
],
policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures Replace 8,286 lines of inline Go test expectations with 92 JSON golden files captured from Tailscale SaaS. The data-driven test driver validates route filtering, auto-approval, HA routing, and exit node behavior against real Tailscale output. Updates #2180
2026-03-17 12:05:49 +00:00
"ipv4": "100.108.74.26",
"ipv6": "fd7a:115c:a1e0::b901:4a87"
},
"user-kris": {
"hostname": "user-kris",
"tags": [],
"ipv4": "100.110.121.96",
"ipv6": "fd7a:115c:a1e0::1737:7960"
},
"user-mon": {
"hostname": "user-mon",
"tags": [],
"ipv4": "100.103.90.82",
"ipv6": "fd7a:115c:a1e0::9e37:5a52"
},
"user1": {
"hostname": "user1",
"tags": [],
"ipv4": "100.90.199.68",
"ipv6": "fd7a:115c:a1e0::2d01:c747"
}
}
},
"captures": {
"big-router": {
"packet_filter_rules": [
{
"SrcIPs": [
"10.0.0.0/8",
"10.33.0.0/16",
"100.115.94.0-100.127.255.255",
"100.64.0.0-100.115.91.255",
"172.16.0.0/24",
"192.168.1.0/24",
"fd7a:115c:a1e0::/48"
],
"DstPorts": [
{
"IP": "10.33.0.0/16",
"Ports": {
"First": 22,
"Last": 22
}
}
]
}
]
},
"exit-node": {
"packet_filter_rules": null
},
"ha-router1": {
"packet_filter_rules": null
},
"ha-router2": {
"packet_filter_rules": null
},
"multi-router": {
"packet_filter_rules": null
},
"subnet-router": {
"packet_filter_rules": [
{
"SrcIPs": [
"10.0.0.0/8",
"10.33.0.0/16",
"100.115.94.0-100.127.255.255",
"100.64.0.0-100.115.91.255",
"172.16.0.0/24",
"192.168.1.0/24",
"fd7a:115c:a1e0::/48"
],
"DstPorts": [
{
"IP": "10.33.0.0/16",
"Ports": {
"First": 22,
"Last": 22
}
}
]
}
]
},
"tagged-client": {
"packet_filter_rules": null
},
"tagged-prod": {
"packet_filter_rules": null
},
"tagged-server": {
"packet_filter_rules": null
},
"user-kris": {
"packet_filter_rules": null
},
"user-mon": {
"packet_filter_rules": null
},
"user1": {
"packet_filter_rules": null
}
}
}
Reference in a new issue Copy permalink