2 commits

Author	SHA1	Message	Date
Kristoffer Dalby	9f7aa55689	policy/v2: refactor alias resolution to use ResolvedAddresses ... Introduce ResolvedAddresses type for structured IP set results. Refactor all Alias.Resolve() methods to return ResolvedAddresses instead of raw IPSets. Restrict identity-based aliases to matching address families, fix nil dereferences in partial resolution paths, and update test expectations for the new IP format (bare IPs, IP ranges instead of CIDR prefixes). Updates #2180	2026-04-01 14:10:42 +01:00
Kristoffer Dalby	0fa9dcaff8	policy/v2: add data-driven grants compatibility test with Tailscale SaaS captures ... Rename tailscale_compat_test.go to tailscale_acl_compat_test.go to make room for the grants compat test. Add 237 GRANT-*.json golden test files captured from Tailscale SaaS and a data-driven test driver that compares headscale's grant filter compilation against real Tailscale behavior. Updates #2180	2026-04-01 14:10:42 +01:00