From d34cb46d020f6ba8679e261fe5cb91892d46ad88 Mon Sep 17 00:00:00 2001
From: Kristoffer Dalby <kristoffer@dalby.cc>
Date: Wed, 28 Oct 2026 19:05:48 +0000
Subject: [PATCH] servertest: pin the Terraform provider version

0.29.3 validates ACLs at plan time through acl/validate, which
headscale lacks, so a floating constraint broke the Terraform tests.
---
 hscontrol/servertest/apiv2_devices_test.go      | 2 +-
 hscontrol/servertest/apiv2_oauth_scopes_test.go | 2 +-
 hscontrol/servertest/apiv2_test.go              | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/hscontrol/servertest/apiv2_devices_test.go b/hscontrol/servertest/apiv2_devices_test.go
index 5d85a46f9..d1a993d4e 100644
--- a/hscontrol/servertest/apiv2_devices_test.go
+++ b/hscontrol/servertest/apiv2_devices_test.go
@@ -357,7 +357,7 @@ terraform {
   required_providers {
     tailscale = {
       source  = "tailscale/tailscale"
-      version = "~> 0.21"
+      version = "0.29.2"
     }
   }
 }
diff --git a/hscontrol/servertest/apiv2_oauth_scopes_test.go b/hscontrol/servertest/apiv2_oauth_scopes_test.go
index 8ac6173ac..78fc5e0a8 100644
--- a/hscontrol/servertest/apiv2_oauth_scopes_test.go
+++ b/hscontrol/servertest/apiv2_oauth_scopes_test.go
@@ -331,7 +331,7 @@ terraform {
   required_providers {
     tailscale = {
       source  = "tailscale/tailscale"
-      version = "~> 0.21"
+      version = "0.29.2"
     }
   }
 }
diff --git a/hscontrol/servertest/apiv2_test.go b/hscontrol/servertest/apiv2_test.go
index 4fb98d10c..ed2cc5924 100644
--- a/hscontrol/servertest/apiv2_test.go
+++ b/hscontrol/servertest/apiv2_test.go
@@ -321,7 +321,7 @@ terraform {
   required_providers {
     tailscale = {
       source  = "tailscale/tailscale"
-      version = "~> 0.21"
+      version = "0.29.2"
     }
   }
 }
@@ -390,7 +390,7 @@ terraform {
   required_providers {
     tailscale = {
       source  = "tailscale/tailscale"
-      version = "~> 0.21"
+      version = "0.29.2"
     }
   }
 }