testdata: strip unused fields from all test data files (23MB -> 4MB)
Strip fields not consumed by any test from all 594 HuJSON test data files:
grant_results/ (248 files, 21MB -> 1.8MB):
- Remove: timestamp, propagation_wait_seconds, input.policy_file,
input.grants_section, input.api_endpoint, input.api_method,
topology.nodes.mts_name, topology.nodes.socket, topology.nodes.user_id,
captures.commands, captures.packet_filter_matches, captures.whois
- V14-V16, V26-V36: keep stripped netmap (Peers.Name/AllowedIPs/PrimaryRoutes
+ PacketFilterRules) for via_compat_test.go compatibility
- V17-V25: strip netmap (old topology, incompatible with via_compat harness)
acl_results/ (215 files, 1.4MB -> 1.2MB):
- Remove: timestamp, propagation_wait_seconds, input.policy_file,
input.api_endpoint, input.api_response_code, entire topology section
(parsed by Go struct but completely ignored — nodes are hardcoded)
routes_results/ (92 files, unchanged — topology is actively used):
- Remove: timestamp, propagation_wait_seconds, input.policy_file,
input.api_endpoint, input.api_response_code
ssh_results/ (39 files, unchanged — minimal to begin with):
- Remove: policy_file
This commit is contained in:
Kristoffer Dalby
parent
30dce30a9d
commit
835db974b5
594 changed files with 45359 additions and 535977 deletions
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-a1_wildcard_acl_includes_routes_in_srcips",
|
||||
"timestamp": "2026-03-17T16:13:48Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_a1_wildcard_acl_includes_routes_in_srcips.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 3 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-a2_tag_based_acl_excludes_routes",
|
||||
"timestamp": "2026-03-17T16:13:59Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_a2_tag_based_acl_excludes_routes.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["tag:router"],
|
||||
"dst": ["tag:router:*"]
|
||||
"src": [
|
||||
"tag:router"
|
||||
],
|
||||
"dst": [
|
||||
"tag:router:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-a3_explicit_subnet_filter_to_router",
|
||||
"timestamp": "2026-03-17T16:14:20Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_a3_explicit_subnet_filter_to_router.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-a3b_autogroup_member_to_subnet",
|
||||
"timestamp": "2026-03-17T16:14:10Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_a3b_autogroup_member_to_subnet.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["autogroup:member"],
|
||||
"dst": ["10.33.0.0/16:*"]
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 1 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-a4_multiple_routes_same_router",
|
||||
"timestamp": "2026-03-17T16:14:31Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_a4_multiple_routes_same_router.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["172.16.0.0/24:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"172.16.0.0/24:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-a5_host_alias_to_subnet",
|
||||
"timestamp": "2026-03-17T16:14:41Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_a5_host_alias_to_subnet.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["internal:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"internal:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-b10_exit_routes_not_in_primaryroutes",
|
||||
"timestamp": "2026-03-17T16:14:52Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_b10_exit_routes_not_in_primaryroutes.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-b1_exit_routes_not_in_srcips",
|
||||
"timestamp": "2026-03-17T16:15:03Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_b1_exit_routes_not_in_srcips.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-b2_tag_exit_excludes_exit_routes",
|
||||
"timestamp": "2026-03-17T16:15:13Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_b2_tag_exit_excludes_exit_routes.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["tag:exit"],
|
||||
"dst": ["tag:exit:*"]
|
||||
"src": [
|
||||
"tag:exit"
|
||||
],
|
||||
"dst": [
|
||||
"tag:exit:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
@ -147,7 +220,12 @@
|
|||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.85.66.106",
|
||||
|
|
@ -176,7 +254,12 @@
|
|||
"multi-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.119.241.111",
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-b3_exit_node_advertises_routes",
|
||||
"timestamp": "2026-03-17T16:15:24Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_b3_exit_node_advertises_routes.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-b4_multi_router_has_both_route_types",
|
||||
"timestamp": "2026-03-17T16:15:35Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_b4_multi_router_has_both_route_types.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-b5_exit_with_wildcard_dst",
|
||||
"timestamp": "2026-03-17T16:15:45Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_b5_exit_with_wildcard_dst.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-b6_exit_node_option_field",
|
||||
"timestamp": "2026-03-17T16:15:56Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_b6_exit_node_option_field.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["tag:exit"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"tag:exit"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
@ -144,7 +217,12 @@
|
|||
"big-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -160,7 +238,12 @@
|
|||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -176,7 +259,12 @@
|
|||
"ha-router1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -192,7 +280,12 @@
|
|||
"ha-router2": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -208,7 +301,12 @@
|
|||
"multi-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -224,7 +322,12 @@
|
|||
"subnet-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -240,7 +343,12 @@
|
|||
"tagged-client": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -256,7 +364,12 @@
|
|||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -272,7 +385,12 @@
|
|||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -288,7 +406,12 @@
|
|||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -304,7 +427,12 @@
|
|||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -320,7 +448,12 @@
|
|||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-b7_multiple_exit_nodes",
|
||||
"timestamp": "2026-03-17T16:16:07Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_b7_multiple_exit_nodes.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["tag:exit"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"tag:exit"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
@ -144,7 +217,12 @@
|
|||
"big-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -160,7 +238,12 @@
|
|||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -176,7 +259,12 @@
|
|||
"ha-router1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -192,7 +280,12 @@
|
|||
"ha-router2": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -208,7 +301,12 @@
|
|||
"multi-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -224,7 +322,12 @@
|
|||
"subnet-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -240,7 +343,12 @@
|
|||
"tagged-client": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -256,7 +364,12 @@
|
|||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -272,7 +385,12 @@
|
|||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -288,7 +406,12 @@
|
|||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -304,7 +427,12 @@
|
|||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -320,7 +448,12 @@
|
|||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: No filter rules
|
||||
{
|
||||
"test_id": "ROUTES-b8_autogroup_internet_no_filters",
|
||||
"timestamp": "2026-03-17T16:16:17Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_b8_autogroup_internet_no_filters.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["autogroup:member"],
|
||||
"dst": ["autogroup:internet:*"]
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:internet:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-b9_exit_routes_in_allowedips",
|
||||
"timestamp": "2026-03-17T16:16:28Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_b9_exit_routes_in_allowedips.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-d10_auto_approval_retroactive",
|
||||
"timestamp": "2026-03-17T16:16:38Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_d10_auto_approval_retroactive.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:443"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-d11_overlapping_auto_approvers",
|
||||
"timestamp": "2026-03-17T16:16:49Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_d11_overlapping_auto_approvers.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.0.0.0/8:80"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.0.0.0/8:80"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-d1_basic_route_auto_approval",
|
||||
"timestamp": "2026-03-17T16:17:00Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_d1_basic_route_auto_approval.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-d2_nested_prefix_approval",
|
||||
"timestamp": "2026-03-17T16:17:10Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_d2_nested_prefix_approval.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-d3_exact_prefix_approval",
|
||||
"timestamp": "2026-03-17T16:17:21Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_d3_exact_prefix_approval.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-d4_prefix_not_covered",
|
||||
"timestamp": "2026-03-17T16:17:32Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_d4_prefix_not_covered.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["192.168.1.0/24:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"192.168.1.0/24:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-d5_wrong_tag_not_approved",
|
||||
"timestamp": "2026-03-17T16:17:42Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_d5_wrong_tag_not_approved.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["tag:router"],
|
||||
"dst": ["192.168.1.0/24:*"]
|
||||
"src": [
|
||||
"tag:router"
|
||||
],
|
||||
"dst": [
|
||||
"192.168.1.0/24:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-d6_exit_node_auto_approval",
|
||||
"timestamp": "2026-03-17T16:17:53Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_d6_exit_node_auto_approval.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-d7_exit_auto_approval_wrong_tag",
|
||||
"timestamp": "2026-03-17T16:18:04Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_d7_exit_auto_approval_wrong_tag.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["tag:exit"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"tag:exit"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
@ -144,7 +217,12 @@
|
|||
"big-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -160,7 +238,12 @@
|
|||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -176,7 +259,12 @@
|
|||
"ha-router1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -192,7 +280,12 @@
|
|||
"ha-router2": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -208,7 +301,12 @@
|
|||
"multi-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -224,7 +322,12 @@
|
|||
"subnet-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -240,7 +343,12 @@
|
|||
"tagged-client": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -256,7 +364,12 @@
|
|||
"tagged-prod": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -272,7 +385,12 @@
|
|||
"tagged-server": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -288,7 +406,12 @@
|
|||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -304,7 +427,12 @@
|
|||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
@ -320,7 +448,12 @@
|
|||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "*",
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-d8_auto_approval_acl_interaction",
|
||||
"timestamp": "2026-03-17T16:18:14Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_d8_auto_approval_acl_interaction.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["autogroup:member"],
|
||||
"dst": ["10.33.0.0/16:22"]
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-d9_auto_approval_triggers_on_advertise",
|
||||
"timestamp": "2026-03-17T16:18:25Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_d9_auto_approval_triggers_on_advertise.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-e1_ha_two_routers_same_subnet",
|
||||
"timestamp": "2026-03-17T16:18:36Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_e1_ha_two_routers_same_subnet.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["192.168.1.0/24:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"192.168.1.0/24:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-e2_ha_primary_in_allowedips",
|
||||
"timestamp": "2026-03-17T16:18:46Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_e2_ha_primary_in_allowedips.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["192.168.1.0/24:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"192.168.1.0/24:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-e3_ha_secondary_no_route_in_allowedips",
|
||||
"timestamp": "2026-03-17T16:18:57Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_e3_ha_secondary_no_route_in_allowedips.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["192.168.1.0/24:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"192.168.1.0/24:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-e4_ha_both_get_filters_host_alias",
|
||||
"timestamp": "2026-03-17T16:19:07Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_e4_ha_both_get_filters_host_alias.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["subnet24:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"subnet24:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-e5_first_advertiser_is_primary",
|
||||
"timestamp": "2026-03-17T16:19:18Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_e5_first_advertiser_is_primary.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["192.168.1.0/24:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"192.168.1.0/24:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-f1_filter_on_destination_not_source",
|
||||
"timestamp": "2026-03-17T16:19:29Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_f1_filter_on_destination_not_source.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["autogroup:member"],
|
||||
"dst": ["10.33.0.0/16:22"]
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 3 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-f2_subnet_as_acl_source",
|
||||
"timestamp": "2026-03-17T16:19:39Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_f2_subnet_as_acl_source.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["10.33.0.0/16"],
|
||||
"dst": ["autogroup:member:*"]
|
||||
"src": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:member:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
@ -171,7 +244,9 @@
|
|||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["10.33.0.0/16"],
|
||||
"SrcIPs": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
|
|
@ -194,7 +269,9 @@
|
|||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["10.33.0.0/16"],
|
||||
"SrcIPs": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
|
|
@ -217,7 +294,9 @@
|
|||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["10.33.0.0/16"],
|
||||
"SrcIPs": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-f3_wildcard_src_specific_dst",
|
||||
"timestamp": "2026-03-17T16:19:50Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_f3_wildcard_src_specific_dst.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-f4_specific_src_wildcard_dst",
|
||||
"timestamp": "2026-03-17T16:20:01Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_f4_specific_src_wildcard_dst.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["tag:router"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"tag:router"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -9,24 +9,40 @@
|
|||
// Expected: Rules on 5 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-f5_bidirectional_subnet_access",
|
||||
"timestamp": "2026-03-17T16:20:11Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_f5_bidirectional_subnet_access.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -36,94 +52,155 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["autogroup:member"],
|
||||
"dst": ["10.33.0.0/16:*"]
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:*"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["10.33.0.0/16"],
|
||||
"dst": ["autogroup:member:*"]
|
||||
"src": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"dst": [
|
||||
"autogroup:member:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
@ -218,7 +295,9 @@
|
|||
"user-kris": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["10.33.0.0/16"],
|
||||
"SrcIPs": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.110.121.96",
|
||||
|
|
@ -241,7 +320,9 @@
|
|||
"user-mon": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["10.33.0.0/16"],
|
||||
"SrcIPs": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.103.90.82",
|
||||
|
|
@ -264,7 +345,9 @@
|
|||
"user1": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["10.33.0.0/16"],
|
||||
"SrcIPs": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.90.199.68",
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-f6_filter_srcips_expansion",
|
||||
"timestamp": "2026-03-17T16:20:22Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_f6_filter_srcips_expansion.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["autogroup:member"],
|
||||
"dst": ["10.33.0.0/16:*"]
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-f7_filter_dstports_shows_acl_cidr",
|
||||
"timestamp": "2026-03-17T16:20:32Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_f7_filter_dstports_shows_acl_cidr.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.1.0/24:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.1.0/24:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: No filter rules
|
||||
{
|
||||
"test_id": "ROUTES-f8_route_enabled_acl_denies",
|
||||
"timestamp": "2026-03-17T16:20:43Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_f8_route_enabled_acl_denies.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["group:empty"],
|
||||
"dst": ["10.33.0.0/16:*"]
|
||||
"src": [
|
||||
"group:empty"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 1 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-f9_route_disabled_acl_allows",
|
||||
"timestamp": "2026-03-17T16:20:54Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_f9_route_disabled_acl_allows.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.99.0.0/16:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.99.0.0/16:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-g1_port_restriction_subnet",
|
||||
"timestamp": "2026-03-17T16:21:04Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_g1_port_restriction_subnet.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["autogroup:member"],
|
||||
"dst": ["10.33.0.0/16:22"]
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-g2_port_range_subnet",
|
||||
"timestamp": "2026-03-17T16:21:15Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_g2_port_range_subnet.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:80-443"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:80-443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-g3_multiple_ports_subnet",
|
||||
"timestamp": "2026-03-17T16:21:26Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_g3_multiple_ports_subnet.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:22,80,443"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:22,80,443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-g4_protocol_icmp_subnet",
|
||||
"timestamp": "2026-03-17T16:21:36Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_g4_protocol_icmp_subnet.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,90 +50,147 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:*"],
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:*"
|
||||
],
|
||||
"proto": "icmp"
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
@ -163,7 +236,9 @@
|
|||
}
|
||||
}
|
||||
],
|
||||
"IPProto": [1]
|
||||
"IPProto": [
|
||||
1
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
|
|
@ -200,7 +275,9 @@
|
|||
}
|
||||
}
|
||||
],
|
||||
"IPProto": [1]
|
||||
"IPProto": [
|
||||
1
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-g5_protocol_tcp_only",
|
||||
"timestamp": "2026-03-17T16:21:47Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_g5_protocol_tcp_only.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,90 +50,147 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:22"],
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:22"
|
||||
],
|
||||
"proto": "tcp"
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
@ -163,7 +236,9 @@
|
|||
}
|
||||
}
|
||||
],
|
||||
"IPProto": [6]
|
||||
"IPProto": [
|
||||
6
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
|
|
@ -200,7 +275,9 @@
|
|||
}
|
||||
}
|
||||
],
|
||||
"IPProto": [6]
|
||||
"IPProto": [
|
||||
6
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-g6_protocol_udp_only",
|
||||
"timestamp": "2026-03-17T16:21:58Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_g6_protocol_udp_only.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,90 +50,147 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:53"],
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:53"
|
||||
],
|
||||
"proto": "udp"
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
@ -163,7 +236,9 @@
|
|||
}
|
||||
}
|
||||
],
|
||||
"IPProto": [17]
|
||||
"IPProto": [
|
||||
17
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
|
|
@ -200,7 +275,9 @@
|
|||
}
|
||||
}
|
||||
],
|
||||
"IPProto": [17]
|
||||
"IPProto": [
|
||||
17
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-g7_all_ports_wildcard",
|
||||
"timestamp": "2026-03-17T16:22:08Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_g7_all_ports_wildcard.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["autogroup:member"],
|
||||
"dst": ["10.33.0.0/16:*"]
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-g8_default_ipproto",
|
||||
"timestamp": "2026-03-17T16:22:19Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_g8_default_ipproto.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-h10_very_small_prefix",
|
||||
"timestamp": "2026-03-17T16:22:30Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_h10_very_small_prefix.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.100/32:80"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.100/32:80"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: No filter rules
|
||||
{
|
||||
"test_id": "ROUTES-h11_ipv6_small_prefix",
|
||||
"timestamp": "2026-03-17T16:22:40Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_h11_ipv6_small_prefix.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["fd00::1/128:443"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"fd00::1/128:443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 3 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-h1_wildcard_srcips_format",
|
||||
"timestamp": "2026-03-17T16:22:51Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_h1_wildcard_srcips_format.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["tag:router:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"tag:router:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-h2_wildcard_dstports_format",
|
||||
"timestamp": "2026-03-17T16:23:01Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_h2_wildcard_dstports_format.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["autogroup:member"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 3 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-h3_cgnat_range_expansion",
|
||||
"timestamp": "2026-03-17T16:23:12Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_h3_cgnat_range_expansion.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["tag:router:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"tag:router:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-h4_ipv6_range_in_srcips",
|
||||
"timestamp": "2026-03-17T16:23:23Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_h4_ipv6_range_in_srcips.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: No filter rules
|
||||
{
|
||||
"test_id": "ROUTES-h5_subnet_overlaps_cgnat",
|
||||
"timestamp": "2026-03-17T16:23:33Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_h5_subnet_overlaps_cgnat.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["100.64.0.0/24:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"100.64.0.0/24:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: No filter rules
|
||||
{
|
||||
"test_id": "ROUTES-h6_loopback_routes_not_distributed",
|
||||
"timestamp": "2026-03-17T16:23:44Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_h6_loopback_routes_not_distributed.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["127.0.0.1/32:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"127.0.0.1/32:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-h7_two_nodes_same_subnet",
|
||||
"timestamp": "2026-03-17T16:23:55Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_h7_two_nodes_same_subnet.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["192.168.1.0/24:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"192.168.1.0/24:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: No filter rules
|
||||
{
|
||||
"test_id": "ROUTES-h8_cgnat_overlap_blocked",
|
||||
"timestamp": "2026-03-17T16:24:05Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_h8_cgnat_overlap_blocked.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["100.100.0.0/16:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"100.100.0.0/16:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-h9_large_prefix_works",
|
||||
"timestamp": "2026-03-17T16:24:16Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_h9_large_prefix_works.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["autogroup:member"],
|
||||
"dst": ["10.0.0.0/8:*"]
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"10.0.0.0/8:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-i1_ipv6_subnet_route",
|
||||
"timestamp": "2026-03-17T16:24:27Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_i1_ipv6_subnet_route.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-i2_ipv6_exit_route",
|
||||
"timestamp": "2026-03-17T16:24:37Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_i2_ipv6_exit_route.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 3 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-i3_ipv6_in_wildcard_srcips",
|
||||
"timestamp": "2026-03-17T16:24:48Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_i3_ipv6_in_wildcard_srcips.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["tag:router:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"tag:router:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: No filter rules
|
||||
{
|
||||
"test_id": "ROUTES-i4_ipv6_specific_acl",
|
||||
"timestamp": "2026-03-17T16:24:59Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_i4_ipv6_specific_acl.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["fd00:1::/64:443"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"fd00:1::/64:443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: No filter rules
|
||||
{
|
||||
"test_id": "ROUTES-i5_ipv6_parent_child_routes",
|
||||
"timestamp": "2026-03-17T16:25:09Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_i5_ipv6_parent_child_routes.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["autogroup:member"],
|
||||
"dst": ["fd00:1:2::/80:*"]
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"fd00:1:2::/80:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -9,24 +9,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-i6_dual_stack_node",
|
||||
"timestamp": "2026-03-17T16:25:20Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_i6_dual_stack_node.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -36,94 +52,155 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:*"
|
||||
]
|
||||
},
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["fd00:1::/64:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"fd00:1::/64:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: No filter rules
|
||||
{
|
||||
"test_id": "ROUTES-i7_ipv6_exit_coverage",
|
||||
"timestamp": "2026-03-17T16:25:31Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_i7_ipv6_exit_coverage.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["2001:db8::/32:443"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"2001:db8::/32:443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-o10_acl_dest_covered_by_multiple",
|
||||
"timestamp": "2026-03-17T16:25:41Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_o10_acl_dest_covered_by_multiple.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.1.0/24:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.1.0/24:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: No filter rules
|
||||
{
|
||||
"test_id": "ROUTES-o11_acl_dest_not_covered",
|
||||
"timestamp": "2026-03-17T16:25:52Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_o11_acl_dest_not_covered.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["192.168.99.0/24:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"192.168.99.0/24:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-o12_filter_dest_is_acl_cidr",
|
||||
"timestamp": "2026-03-17T16:26:03Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_o12_filter_dest_is_acl_cidr.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.1.0/24:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.1.0/24:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-o1_overlapping_routes_not_merged",
|
||||
"timestamp": "2026-03-17T16:26:13Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_o1_overlapping_routes_not_merged.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-o2_ha_routers_both_get_filter",
|
||||
"timestamp": "2026-03-17T16:26:24Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_o2_ha_routers_both_get_filter.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["192.168.1.0/24:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"192.168.1.0/24:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-o3_parent_child_different_nodes",
|
||||
"timestamp": "2026-03-17T16:26:34Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_o3_parent_child_different_nodes.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.1.0/24:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.1.0/24:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-o4_three_way_hierarchy",
|
||||
"timestamp": "2026-03-17T16:26:45Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_o4_three_way_hierarchy.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.1.128/25:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.1.128/25:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-o5_sibling_routes_with_parent_acl",
|
||||
"timestamp": "2026-03-17T16:26:56Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_o5_sibling_routes_with_parent_acl.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.0.0.0/8:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.0.0.0/8:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: No filter rules
|
||||
{
|
||||
"test_id": "ROUTES-o6_exit_route_expands_filter_dist",
|
||||
"timestamp": "2026-03-17T16:27:06Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_o6_exit_route_expands_filter_dist.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["8.8.8.0/24:53"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"8.8.8.0/24:53"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-o7_specific_ip_targeting",
|
||||
"timestamp": "2026-03-17T16:27:17Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_o7_specific_ip_targeting.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.100/32:80"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.100/32:80"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-o8_same_node_overlapping_routes",
|
||||
"timestamp": "2026-03-17T16:27:28Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_o8_same_node_overlapping_routes.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.1.0/24:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.1.0/24:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-o9_different_nodes_same_route",
|
||||
"timestamp": "2026-03-17T16:27:38Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_o9_different_nodes_same_route.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["autogroup:member"],
|
||||
"dst": ["192.168.1.0/24:*"]
|
||||
"src": [
|
||||
"autogroup:member"
|
||||
],
|
||||
"dst": [
|
||||
"192.168.1.0/24:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: No filter rules
|
||||
{
|
||||
"test_id": "ROUTES-r1_exit_covers_external_dest",
|
||||
"timestamp": "2026-03-17T16:27:49Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_r1_exit_covers_external_dest.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["8.8.8.0/24:53"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"8.8.8.0/24:53"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-r2_parent_route_covers_child_dest",
|
||||
"timestamp": "2026-03-17T16:27:59Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_r2_parent_route_covers_child_dest.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.1.0/24:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.1.0/24:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 1 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-r3_sibling_routes_no_coverage",
|
||||
"timestamp": "2026-03-17T16:28:10Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_r3_sibling_routes_no_coverage.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.34.0.0/16:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.34.0.0/16:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-r4_exact_match_route",
|
||||
"timestamp": "2026-03-17T16:28:21Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_r4_exact_match_route.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-r5_route_coverage_check_logic",
|
||||
"timestamp": "2026-03-17T16:28:31Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_r5_route_coverage_check_logic.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.1.0/24:22"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.1.0/24:22"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: No filter rules
|
||||
{
|
||||
"test_id": "ROUTES-r6_ipv6_route_coverage",
|
||||
"timestamp": "2026-03-17T16:28:42Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_r6_ipv6_route_coverage.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["fd7a:115c:a1e0::1/128:443"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"fd7a:115c:a1e0::1/128:443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: No filter rules
|
||||
{
|
||||
"test_id": "ROUTES-r7_exit_ipv6_coverage",
|
||||
"timestamp": "2026-03-17T16:28:53Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_r7_exit_ipv6_coverage.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["2001:db8::1/128:443"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"2001:db8::1/128:443"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-r8_mixed_ipv4_ipv6_coverage",
|
||||
"timestamp": "2026-03-17T16:29:03Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_r8_mixed_ipv4_ipv6_coverage.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,147 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["10.33.0.0/16:*", "fd7a:115c:a1e0::/64:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"10.33.0.0/16:*",
|
||||
"fd7a:115c:a1e0::/64:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 3 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-t1_tags_resolve_to_ips_not_routes",
|
||||
"timestamp": "2026-03-17T16:29:14Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_t1_tags_resolve_to_ips_not_routes.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["tag:router"],
|
||||
"dst": ["tag:router:*"]
|
||||
"src": [
|
||||
"tag:router"
|
||||
],
|
||||
"dst": [
|
||||
"tag:router:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-t2_tag_to_tag_with_exit",
|
||||
"timestamp": "2026-03-17T16:29:24Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_t2_tag_to_tag_with_exit.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["tag:exit"],
|
||||
"dst": ["tag:exit:*"]
|
||||
"src": [
|
||||
"tag:exit"
|
||||
],
|
||||
"dst": [
|
||||
"tag:exit:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
@ -147,7 +220,12 @@
|
|||
"exit-node": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.85.66.106",
|
||||
|
|
@ -176,7 +254,12 @@
|
|||
"multi-router": {
|
||||
"packet_filter_rules": [
|
||||
{
|
||||
"SrcIPs": ["100.119.241.111", "100.85.66.106", "fd7a:115c:a1e0::3337:f16f", "fd7a:115c:a1e0::7c37:426a"],
|
||||
"SrcIPs": [
|
||||
"100.119.241.111",
|
||||
"100.85.66.106",
|
||||
"fd7a:115c:a1e0::3337:f16f",
|
||||
"fd7a:115c:a1e0::7c37:426a"
|
||||
],
|
||||
"DstPorts": [
|
||||
{
|
||||
"IP": "100.119.241.111",
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 12 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-t3_tag_src_includes_all_tagged",
|
||||
"timestamp": "2026-03-17T16:29:35Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_t3_tag_src_includes_all_tagged.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["tag:router"],
|
||||
"dst": ["*:*"]
|
||||
"src": [
|
||||
"tag:router"
|
||||
],
|
||||
"dst": [
|
||||
"*:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-t4_tag_dst_includes_all_tagged",
|
||||
"timestamp": "2026-03-17T16:29:46Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_t4_tag_dst_includes_all_tagged.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["*"],
|
||||
"dst": ["tag:ha:*"]
|
||||
"src": [
|
||||
"*"
|
||||
],
|
||||
"dst": [
|
||||
"tag:ha:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -7,24 +7,40 @@
|
|||
// Expected: Rules on 2 of 12 nodes
|
||||
{
|
||||
"test_id": "ROUTES-t5_multi_tag_node_in_both",
|
||||
"timestamp": "2026-03-17T16:29:56Z",
|
||||
"propagation_wait_seconds": 10,
|
||||
"input": {
|
||||
"policy_file": "routes_policies/routes_t5_multi_tag_node_in_both.json",
|
||||
"full_policy": {
|
||||
"groups": {
|
||||
"group:admins": ["kratail2tid@passkey"],
|
||||
"group:developers": ["kristoffer@dalby.cc", "kratail2tid@passkey"],
|
||||
"group:monitors": ["monitorpasskeykradalby@passkey"],
|
||||
"group:admins": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:developers": [
|
||||
"kristoffer@dalby.cc",
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"group:monitors": [
|
||||
"monitorpasskeykradalby@passkey"
|
||||
],
|
||||
"group:empty": []
|
||||
},
|
||||
"tagOwners": {
|
||||
"tag:server": ["kratail2tid@passkey"],
|
||||
"tag:prod": ["kratail2tid@passkey"],
|
||||
"tag:client": ["kratail2tid@passkey"],
|
||||
"tag:router": ["kratail2tid@passkey"],
|
||||
"tag:exit": ["kratail2tid@passkey"],
|
||||
"tag:ha": ["kratail2tid@passkey"]
|
||||
"tag:server": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:prod": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:client": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:router": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:exit": [
|
||||
"kratail2tid@passkey"
|
||||
],
|
||||
"tag:ha": [
|
||||
"kratail2tid@passkey"
|
||||
]
|
||||
},
|
||||
"hosts": {
|
||||
"webserver": "100.108.74.26",
|
||||
|
|
@ -34,89 +50,146 @@
|
|||
},
|
||||
"autoApprovers": {
|
||||
"routes": {
|
||||
"10.0.0.0/8": ["tag:router"],
|
||||
"172.16.0.0/12": ["tag:router"],
|
||||
"192.168.0.0/16": ["tag:ha"],
|
||||
"0.0.0.0/0": ["tag:exit"],
|
||||
"::/0": ["tag:exit"]
|
||||
"10.0.0.0/8": [
|
||||
"tag:router"
|
||||
],
|
||||
"172.16.0.0/12": [
|
||||
"tag:router"
|
||||
],
|
||||
"192.168.0.0/16": [
|
||||
"tag:ha"
|
||||
],
|
||||
"0.0.0.0/0": [
|
||||
"tag:exit"
|
||||
],
|
||||
"::/0": [
|
||||
"tag:exit"
|
||||
]
|
||||
}
|
||||
},
|
||||
"acls": [
|
||||
{
|
||||
"action": "accept",
|
||||
"src": ["tag:router"],
|
||||
"dst": ["tag:exit:*"]
|
||||
"src": [
|
||||
"tag:router"
|
||||
],
|
||||
"dst": [
|
||||
"tag:exit:*"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
||||
"api_response_code": 200
|
||||
}
|
||||
},
|
||||
"topology": {
|
||||
"nodes": {
|
||||
"big-router": {
|
||||
"hostname": "big-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.97.174.21",
|
||||
"ipv6": "fd7a:115c:a1e0::5137:ae15",
|
||||
"routable_ips": ["10.0.0.0/8"],
|
||||
"approved_routes": ["10.0.0.0/8"]
|
||||
"routable_ips": [
|
||||
"10.0.0.0/8"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.0.0.0/8"
|
||||
]
|
||||
},
|
||||
"exit-node": {
|
||||
"hostname": "exit-node",
|
||||
"tags": ["tag:exit"],
|
||||
"tags": [
|
||||
"tag:exit"
|
||||
],
|
||||
"ipv4": "100.85.66.106",
|
||||
"ipv6": "fd7a:115c:a1e0::7c37:426a",
|
||||
"routable_ips": ["0.0.0.0/0", "::/0"],
|
||||
"approved_routes": ["0.0.0.0/0", "::/0"]
|
||||
"routable_ips": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
],
|
||||
"approved_routes": [
|
||||
"0.0.0.0/0",
|
||||
"::/0"
|
||||
]
|
||||
},
|
||||
"ha-router1": {
|
||||
"hostname": "ha-router1",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.121.186.70",
|
||||
"ipv6": "fd7a:115c:a1e0::6737:ba46",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"ha-router2": {
|
||||
"hostname": "ha-router2",
|
||||
"tags": ["tag:ha"],
|
||||
"tags": [
|
||||
"tag:ha"
|
||||
],
|
||||
"ipv4": "100.117.104.82",
|
||||
"ipv6": "fd7a:115c:a1e0::7437:6852",
|
||||
"routable_ips": ["192.168.1.0/24"],
|
||||
"approved_routes": ["192.168.1.0/24"]
|
||||
"routable_ips": [
|
||||
"192.168.1.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"192.168.1.0/24"
|
||||
]
|
||||
},
|
||||
"multi-router": {
|
||||
"hostname": "multi-router",
|
||||
"tags": ["tag:exit", "tag:router"],
|
||||
"tags": [
|
||||
"tag:exit",
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.119.241.111",
|
||||
"ipv6": "fd7a:115c:a1e0::3337:f16f",
|
||||
"routable_ips": ["172.16.0.0/24"],
|
||||
"approved_routes": ["172.16.0.0/24"]
|
||||
"routable_ips": [
|
||||
"172.16.0.0/24"
|
||||
],
|
||||
"approved_routes": [
|
||||
"172.16.0.0/24"
|
||||
]
|
||||
},
|
||||
"subnet-router": {
|
||||
"hostname": "subnet-router",
|
||||
"tags": ["tag:router"],
|
||||
"tags": [
|
||||
"tag:router"
|
||||
],
|
||||
"ipv4": "100.92.142.61",
|
||||
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
|
||||
"routable_ips": ["10.33.0.0/16"],
|
||||
"approved_routes": ["10.33.0.0/16"]
|
||||
"routable_ips": [
|
||||
"10.33.0.0/16"
|
||||
],
|
||||
"approved_routes": [
|
||||
"10.33.0.0/16"
|
||||
]
|
||||
},
|
||||
"tagged-client": {
|
||||
"hostname": "tagged-client",
|
||||
"tags": ["tag:client"],
|
||||
"tags": [
|
||||
"tag:client"
|
||||
],
|
||||
"ipv4": "100.83.200.69",
|
||||
"ipv6": "fd7a:115c:a1e0::c537:c845"
|
||||
},
|
||||
"tagged-prod": {
|
||||
"hostname": "tagged-prod",
|
||||
"tags": ["tag:prod"],
|
||||
"tags": [
|
||||
"tag:prod"
|
||||
],
|
||||
"ipv4": "100.103.8.15",
|
||||
"ipv6": "fd7a:115c:a1e0::5b37:80f"
|
||||
},
|
||||
"tagged-server": {
|
||||
"hostname": "tagged-server",
|
||||
"tags": ["tag:server"],
|
||||
"tags": [
|
||||
"tag:server"
|
||||
],
|
||||
"ipv4": "100.108.74.26",
|
||||
"ipv6": "fd7a:115c:a1e0::b901:4a87"
|
||||
},
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue