rsp2k/headscale
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

policy/v2: add advertised routes to compat test topologies

Browse source 
Add routable_ips and approved_routes fields to the node topology
definitions in all golden test files. These represent the subnet
routes actually advertised by nodes on the Tailscale SaaS network
during data capture:

  Routes topology (92 files, 6 router nodes):
    big-router:     10.0.0.0/8
    subnet-router:  10.33.0.0/16
    ha-router1:     192.168.1.0/24
    ha-router2:     192.168.1.0/24
    multi-router:   172.16.0.0/24
    exit-node:      0.0.0.0/0, ::/0

  ACL topology (199 files, 1 router node):
    subnet-router:  10.33.0.0/16

  Grants topology (203 files, 1 router node):
    subnet-router:  10.33.0.0/16

The route assignments were deduced from the golden data by analyzing
which router nodes receive FilterRules for which destination CIDRs
across all test files, and cross-referenced with the MTS setup
script (setup_grant_nodes.sh).

Updates #2180
This commit is contained in:
Kristoffer Dalby 2026-03-18 13:40:19 +00:00
parent 927ce418d2
commit 995ed0187c
494 changed files with 76022 additions and 15770 deletions
Download patch file Download diff file Expand all files Collapse all files

112
hscontrol/policy/v2/testdata/grant_results/GRANT-P09_14A.json vendored
View file

@ -44,8 +44,16 @@
]
},
"grants_section": [
{ "src": ["tag:client"], "dst": ["tag:server"], "ip": ["22"] },
{ "src": ["tag:client"], "dst": ["tag:server"], "ip": ["80"] }
{
"src": ["tag:client"],
"dst": ["tag:server"],
"ip": ["22"]
},
{
"src": ["tag:client"],
"dst": ["tag:server"],
"ip": ["80"]
}
],
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
"api_method": "POST",
@ -69,7 +77,9 @@
"user_id": 7489538288452506,
"tags": ["tag:router"],
"ipv4": "100.92.142.61",
"ipv6": "fd7a:115c:a1e0::3e37:8e3d"
"ipv6": "fd7a:115c:a1e0::3e37:8e3d",
"routable_ips": ["10.33.0.0/16"],
"approved_routes": ["10.33.0.0/16"]
},
"tagged-client": {
"mts_name": "tagged-client",
@ -266,8 +276,14 @@
"OS": "linux",
"Hostname": "tagged-server",
"Services": [
{ "Proto": "peerapi4", "Port": 46499 },
{ "Proto": "peerapi6", "Port": 46499 }
{
"Proto": "peerapi4",
"Port": 46499
},
{
"Proto": "peerapi6",
"Port": 46499
}
]
},
"Created": "2026-01-23T10:10:26.365653609Z",
@ -277,7 +293,11 @@
"ComputedName": "tagged-server",
"ComputedNameWithHost": "tagged-server"
},
"UserProfile": { "ID": 1260082990019555, "LoginName": "tagged-devices", "DisplayName": "Tagged Devices" },
"UserProfile": {
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
},
"CapMap": null
}
},
@ -352,10 +372,34 @@
{
"SrcIPs": ["100.83.200.69", "fd7a:115c:a1e0::c537:c845"],
"DstPorts": [
{ "IP": "100.108.74.26", "Ports": { "First": 22, "Last": 22 } },
{ "IP": "fd7a:115c:a1e0::b901:4a87", "Ports": { "First": 22, "Last": 22 } },
{ "IP": "100.108.74.26", "Ports": { "First": 80, "Last": 80 } },
{ "IP": "fd7a:115c:a1e0::b901:4a87", "Ports": { "First": 80, "Last": 80 } }
{
"IP": "100.108.74.26",
"Ports": {
"First": 22,
"Last": 22
}
},
{
"IP": "fd7a:115c:a1e0::b901:4a87",
"Ports": {
"First": 22,
"Last": 22
}
},
{
"IP": "100.108.74.26",
"Ports": {
"First": 80,
"Last": 80
}
},
{
"IP": "fd7a:115c:a1e0::b901:4a87",
"Ports": {
"First": 80,
"Last": 80
}
}
]
}
],
@ -365,10 +409,34 @@
"Srcs": ["100.83.200.69/32", "fd7a:115c:a1e0::c537:c845/128"],
"SrcCaps": null,
"Dsts": [
{ "Net": "100.108.74.26/32", "Ports": { "First": 22, "Last": 22 } },
{ "Net": "fd7a:115c:a1e0::b901:4a87/128", "Ports": { "First": 22, "Last": 22 } },
{ "Net": "100.108.74.26/32", "Ports": { "First": 80, "Last": 80 } },
{ "Net": "fd7a:115c:a1e0::b901:4a87/128", "Ports": { "First": 80, "Last": 80 } }
{
"Net": "100.108.74.26/32",
"Ports": {
"First": 22,
"Last": 22
}
},
{
"Net": "fd7a:115c:a1e0::b901:4a87/128",
"Ports": {
"First": 22,
"Last": 22
}
},
{
"Net": "100.108.74.26/32",
"Ports": {
"First": 80,
"Last": 80
}
},
{
"Net": "fd7a:115c:a1e0::b901:4a87/128",
"Ports": {
"First": 80,
"Last": 80
}
}
],
"Caps": []
}
@ -409,8 +477,14 @@
"OS": "linux",
"Hostname": "tagged-client",
"Services": [
{ "Proto": "peerapi4", "Port": 41378 },
{ "Proto": "peerapi6", "Port": 41378 }
{
"Proto": "peerapi4",
"Port": 41378
},
{
"Proto": "peerapi6",
"Port": 41378
}
]
},
"Created": "2026-02-23T00:13:11.017324028Z",
@ -420,7 +494,11 @@
"ComputedName": "tagged-client",
"ComputedNameWithHost": "tagged-client"
},
"UserProfile": { "ID": 1260082990019555, "LoginName": "tagged-devices", "DisplayName": "Tagged Devices" },
"UserProfile": {
"ID": 1260082990019555,
"LoginName": "tagged-devices",
"DisplayName": "Tagged Devices"
},
"CapMap": null
}
},