rsp2k/headscale
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

integration: cover exit nodes via autogroup:internet ACL (#3212)

Browse source 
TestEnablingExitRoutes runs without an ACL, so tailcfg.FilterAllowAll
hides any policy-path regression. Add a sibling that applies the literal
#3212 policy via hsic.WithACLPolicy after registration and approval,
then asserts each peer carries 0.0.0.0/0 + ::/0 in AllowedIPs and
ExitNodeOption is true — the daemon-derived bool that drives
`tailscale exit-node list`.

Updates #3212
This commit is contained in:
Kristoffer Dalby 2026-04-28 11:31:05 +00:00
parent c7a0ca709f
commit ba251e7b47
2 changed files with 140 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
.github/workflows/test-integration.yaml vendored
View file

@ -239,6 +239,7 @@ jobs:
- TestHASubnetRouterFailover
- TestSubnetRouteACL
- TestEnablingExitRoutes
- TestExitRoutesWithAutogroupInternetACL
- TestSubnetRouterMultiNetwork
- TestSubnetRouterMultiNetworkExitNode
- TestAutoApproveMultiNetwork/authkey-tag.*