testdata: convert .json to .hujson with header comments

Rename all 594 test data files from .json to .hujson and add
descriptive header comments to each file documenting what policy
rules are under test and what outcome is expected.

Update test loaders in all 5 _test.go files to parse HuJSON via
hujson.Parse/Standardize/Pack before json.Unmarshal.

Add cross-dependency warning to via_compat_test.go documenting
that GRANT-V29/V30/V31/V36 are shared with TestGrantsCompat.

Add .gitignore exemption for testdata HuJSON files.

hscontrol/policy/v2/testdata/ssh_results/SSH-A1.hujson

@@ -1,3 +1,8 @@
+// SSH-A1
+//
+// SSH:  accept: src=['autogroup:member'] dst=['autogroup:self'] users=['root']
+//
+// Expected: SSH rules on 3 of 5 nodes
 {
   "test_id": "SSH-A1",
   "policy_file": "ssh_policies/ssh_a1.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-A2.hujson

@@ -1,3 +1,8 @@
+// SSH-A2
+//
+// SSH:  accept: src=['autogroup:member'] dst=['autogroup:self'] users=['autogroup:nonroot']
+//
+// Expected: SSH rules on 3 of 5 nodes
 {
   "test_id": "SSH-A2",
   "policy_file": "ssh_policies/ssh_a2.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-A3.hujson

@@ -1,3 +1,8 @@
+// SSH-A3
+//
+// SSH:  accept: src=['autogroup:member'] dst=['autogroup:self'] users=['root', 'autogroup:nonroot']
+//
+// Expected: SSH rules on 3 of 5 nodes
 {
   "test_id": "SSH-A3",
   "policy_file": "ssh_policies/ssh_a3.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-A4.hujson

@@ -1,3 +1,8 @@
+// SSH-A4
+//
+// SSH:  accept: src=['autogroup:member'] dst=['tag:server'] users=['ubuntu']
+//
+// Expected: SSH rules on 1 of 5 nodes
 {
   "test_id": "SSH-A4",
   "policy_file": "ssh_policies/ssh_a4.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-A5.hujson

@@ -1,3 +1,8 @@
+// SSH-A5
+//
+// SSH:  accept: src=['autogroup:member'] dst=['tag:server'] users=['root', 'ubuntu']
+//
+// Expected: SSH rules on 1 of 5 nodes
 {
   "test_id": "SSH-A5",
   "policy_file": "ssh_policies/ssh_a5.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-A6.hujson

@@ -1,3 +1,8 @@
+// SSH-A6
+//
+// SSH:  check: src=['autogroup:member'] dst=['autogroup:self'] users=['root']
+//
+// Expected: SSH rules on 3 of 5 nodes
 {
   "test_id": "SSH-A6",
   "policy_file": "ssh_policies/ssh_a6.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-A7.hujson

@@ -1,3 +1,8 @@
+// SSH-A7
+//
+// SSH:  check: src=['autogroup:member'] dst=['autogroup:self'] users=['root']
+//
+// Expected: SSH rules on 3 of 5 nodes
 {
   "test_id": "SSH-A7",
   "policy_file": "ssh_policies/ssh_a7.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-A8.hujson

@@ -1,3 +1,8 @@
+// SSH-A8
+//
+// SSH:  check: src=['autogroup:member'] dst=['autogroup:self'] users=['root']
+//
+// Expected: SSH rules on 3 of 5 nodes
 {
   "test_id": "SSH-A8",
   "policy_file": "ssh_policies/ssh_a8.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-B1.hujson

@@ -1,3 +1,8 @@
+// SSH-B1
+//
+// SSH:  accept: src=['kristoffer@dalby.cc'] dst=['tag:server'] users=['root']
+//
+// Expected: SSH rules on 1 of 5 nodes
 {
   "test_id": "SSH-B1",
   "policy_file": "ssh_policies/ssh_b1.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-B2.hujson

@@ -1,3 +1,8 @@
+// SSH-B2
+//
+// SSH:  accept: src=['group:developers'] dst=['tag:server'] users=['root']
+//
+// Expected: SSH rules on 1 of 5 nodes
 {
   "test_id": "SSH-B2",
   "policy_file": "ssh_policies/ssh_b2.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-B3.hujson

@@ -1,3 +1,8 @@
+// SSH-B3
+//
+// SSH:  accept: src=['tag:prod'] dst=['tag:server'] users=['root']
+//
+// Expected: SSH rules on 1 of 5 nodes
 {
   "test_id": "SSH-B3",
   "policy_file": "ssh_policies/ssh_b3.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-B5.hujson

@@ -1,3 +1,8 @@
+// SSH-B5
+//
+// SSH:  accept: src=['user:*@passkey'] dst=['tag:server'] users=['root']
+//
+// Expected: SSH rules on 1 of 5 nodes
 {
   "test_id": "SSH-B5",
   "policy_file": "ssh_policies/ssh_b5.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-B6.hujson

@@ -1,3 +1,8 @@
+// SSH-B6
+//
+// SSH:  accept: src=['autogroup:tagged'] dst=['tag:server'] users=['root']
+//
+// Expected: SSH rules on 1 of 5 nodes
 {
   "test_id": "SSH-B6",
   "policy_file": "ssh_policies/ssh_b6.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-C1.hujson

@@ -1,3 +1,8 @@
+// SSH-C1
+//
+// SSH:  accept: src=['autogroup:member'] dst=['autogroup:self'] users=['root']
+//
+// Expected: SSH rules on 3 of 5 nodes
 {
   "test_id": "SSH-C1",
   "policy_file": "ssh_policies/ssh_c1.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-C2.hujson

@@ -1,3 +1,8 @@
+// SSH-C2
+//
+// SSH:  accept: src=['autogroup:member'] dst=['tag:server'] users=['root']
+//
+// Expected: SSH rules on 1 of 5 nodes
 {
   "test_id": "SSH-C2",
   "policy_file": "ssh_policies/ssh_c2.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-C3.hujson

@@ -1,3 +1,8 @@
+// SSH-C3
+//
+// SSH:  accept: src=['kristoffer@dalby.cc'] dst=['kristoffer@dalby.cc'] users=['root']
+//
+// Expected: SSH rules on 1 of 5 nodes
 {
   "test_id": "SSH-C3",
   "policy_file": "ssh_policies/ssh_c3.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-C4.hujson

@@ -1,3 +1,8 @@
+// SSH-C4
+//
+// SSH:  accept: src=['autogroup:member'] dst=['tag:server', 'tag:prod'] users=['root']
+//
+// Expected: SSH rules on 2 of 5 nodes
 {
   "test_id": "SSH-C4",
   "policy_file": "ssh_policies/ssh_c4.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-D10.hujson

@@ -1,3 +1,8 @@
+// SSH-D10
+//
+// SSH:  accept: src=['user:*@passkey'] dst=['tag:server'] users=['localpart:*@passkey']
+//
+// Expected: SSH rules on 3 of 5 nodes
 {
   "test_id": "SSH-D10",
   "policy_file": "ssh_policies/ssh_d10.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-D11.hujson

@@ -1,3 +1,8 @@
+// SSH-D11
+//
+// SSH:  accept: src=['autogroup:member'] dst=['tag:server'] users=['localpart:*@passkey', 'ubuntu']
+//
+// Expected: SSH rules on 4 of 5 nodes
 {
   "test_id": "SSH-D11",
   "policy_file": "ssh_policies/ssh_d11.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-D12.hujson

@@ -1,3 +1,8 @@
+// SSH-D12
+//
+// SSH:  accept: src=['autogroup:member'] dst=['tag:server'] users=['localpart:*@passkey', 'ubuntu']
+//
+// Expected: SSH rules on 4 of 5 nodes
 {
   "test_id": "SSH-D12",
   "policy_file": "ssh_policies/ssh_d12.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-D2.hujson

@@ -1,3 +1,8 @@
+// SSH-D2
+//
+// SSH:  accept: src=['autogroup:member'] dst=['tag:server'] users=['localpart:*@passkey']
+//
+// Expected: SSH rules on 4 of 5 nodes
 {
   "test_id": "SSH-D2",
   "policy_file": "ssh_policies/ssh_d2.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-D3.hujson

@@ -1,3 +1,8 @@
+// SSH-D3
+//
+// SSH:  accept: src=['autogroup:member'] dst=['tag:server'] users=['localpart:*@passkey', 'root']
+//
+// Expected: SSH rules on 4 of 5 nodes
 {
   "test_id": "SSH-D3",
   "policy_file": "ssh_policies/ssh_d3.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-D4.hujson

@@ -1,3 +1,8 @@
+// SSH-D4
+//
+// SSH:  accept: src=['autogroup:member'] dst=['tag:server'] users=['localpart:*@passkey', 'autogroup:nonroot']
+//
+// Expected: SSH rules on 4 of 5 nodes
 {
   "test_id": "SSH-D4",
   "policy_file": "ssh_policies/ssh_d4.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-D5.hujson

@@ -1,3 +1,8 @@
+// SSH-D5
+//
+// SSH:  accept: src=['autogroup:member'] dst=['tag:server'] users=['localpart:*@passkey', 'root', 'autogroup:nonroot']
+//
+// Expected: SSH rules on 4 of 5 nodes
 {
   "test_id": "SSH-D5",
   "policy_file": "ssh_policies/ssh_d5.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-D6.hujson

@@ -1,3 +1,8 @@
+// SSH-D6
+//
+// SSH:  accept: src=['autogroup:member'] dst=['tag:server'] users=['localpart:*@passkey', 'autogroup:nonroot']
+//
+// Expected: SSH rules on 4 of 5 nodes
 {
   "test_id": "SSH-D6",
   "policy_file": "ssh_policies/ssh_d6.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-D7.hujson

@@ -1,3 +1,8 @@
+// SSH-D7
+//
+// SSH:  accept: src=['autogroup:member'] dst=['tag:server'] users=['localpart:*@passkey', 'root', 'autogroup:nonroot']
+//
+// Expected: SSH rules on 4 of 5 nodes
 {
   "test_id": "SSH-D7",
   "policy_file": "ssh_policies/ssh_d7.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-D8.hujson

@@ -1,3 +1,8 @@
+// SSH-D8
+//
+// SSH:  accept: src=['autogroup:member'] dst=['autogroup:self'] users=['localpart:*@passkey']
+//
+// Expected: SSH rules on 3 of 5 nodes
 {
   "test_id": "SSH-D8",
   "policy_file": "ssh_policies/ssh_d8.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-D9.hujson

@@ -1,3 +1,8 @@
+// SSH-D9
+//
+// SSH:  accept: src=['autogroup:member'] dst=['autogroup:self'] users=['localpart:*@passkey', 'root']
+//
+// Expected: SSH rules on 3 of 5 nodes
 {
   "test_id": "SSH-D9",
   "policy_file": "ssh_policies/ssh_d9.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-E3.hujson

@@ -1,3 +1,8 @@
+// SSH-E3
+//
+// SSH:  (no SSH rules)
+//
+// Expected: No SSH rules
 {
   "test_id": "SSH-E3",
   "policy_file": "ssh_policies/ssh_e3.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-E4.hujson

@@ -1,3 +1,8 @@
+// SSH-E4
+//
+// SSH:  (no SSH rules)
+//
+// Expected: No SSH rules
 {
   "test_id": "SSH-E4",
   "policy_file": "ssh_policies/ssh_e4.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-E5.hujson

@@ -1,3 +1,8 @@
+// SSH-E5
+//
+// SSH:  accept: src=['tag:prod'] dst=['tag:server'] users=['localpart:*@passkey']
+//
+// Expected: SSH rules on 2 of 5 nodes
 {
   "test_id": "SSH-E5",
   "policy_file": "ssh_policies/ssh_e5.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-E6.hujson

@@ -1,3 +1,8 @@
+// SSH-E6
+//
+// SSH:  check: src=['autogroup:member'] dst=['tag:server'] users=['localpart:*@passkey']
+//
+// Expected: SSH rules on 4 of 5 nodes
 {
   "test_id": "SSH-E6",
   "policy_file": "ssh_policies/ssh_e6.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-F1.hujson

@@ -1,3 +1,10 @@
+// SSH-F1
+//
+// SSH rules:
+//   accept: src=['autogroup:member'] dst=['autogroup:self'] users=['root']
+//   accept: src=['autogroup:member'] dst=['tag:server'] users=['autogroup:nonroot']
+//
+// Expected: SSH rules on 4 of 5 nodes
 {
   "test_id": "SSH-F1",
   "policy_file": "ssh_policies/ssh_f1.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-F2.hujson

@@ -1,3 +1,10 @@
+// SSH-F2
+//
+// SSH rules:
+//   accept: src=['autogroup:member'] dst=['tag:server'] users=['root']
+//   check: src=['autogroup:member'] dst=['tag:server'] users=['root']
+//
+// Expected: SSH rules on 1 of 5 nodes
 {
   "test_id": "SSH-F2",
   "policy_file": "ssh_policies/ssh_f2.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-F3.hujson

@@ -1,3 +1,10 @@
+// SSH-F3
+//
+// SSH rules:
+//   accept: src=['autogroup:member'] dst=['tag:server'] users=['localpart:*@passkey']
+//   accept: src=['autogroup:member'] dst=['tag:server'] users=['root']
+//
+// Expected: SSH rules on 4 of 5 nodes
 {
   "test_id": "SSH-F3",
   "policy_file": "ssh_policies/ssh_f3.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-F4.hujson

@@ -1,3 +1,10 @@
+// SSH-F4
+//
+// SSH rules:
+//   accept: src=['autogroup:member'] dst=['tag:server'] users=['localpart:*@passkey']
+//   accept: src=['autogroup:member'] dst=['tag:server'] users=['autogroup:nonroot']
+//
+// Expected: SSH rules on 4 of 5 nodes
 {
   "test_id": "SSH-F4",
   "policy_file": "ssh_policies/ssh_f4.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-F5.hujson

@@ -1,3 +1,10 @@
+// SSH-F5
+//
+// SSH rules:
+//   accept: src=['autogroup:member'] dst=['autogroup:self'] users=['localpart:*@passkey']
+//   accept: src=['autogroup:member'] dst=['tag:server'] users=['localpart:*@passkey']
+//
+// Expected: SSH rules on 4 of 5 nodes
 {
   "test_id": "SSH-F5",
   "policy_file": "ssh_policies/ssh_f5.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-G1.hujson

@@ -1,3 +1,8 @@
+// SSH-G1
+//
+// SSH:  accept: src=['autogroup:member'] dst=['tag:server'] users=['root']
+//
+// Expected: SSH rules on 1 of 5 nodes
 {
   "test_id": "SSH-G1",
   "policy_file": "ssh_policies/ssh_g1.json",

hscontrol/policy/v2/testdata/ssh_results/SSH-G2.hujson

@@ -1,3 +1,8 @@
+// SSH-G2
+//
+// SSH:  accept: src=['autogroup:member'] dst=['tag:server'] users=['root']
+//
+// Expected: SSH rules on 1 of 5 nodes
 {
   "test_id": "SSH-G2",
   "policy_file": "ssh_policies/ssh_g2.json",