mirror of
https://github.com/juanfont/headscale.git
synced 2026-05-07 11:20:58 +09:00
TestEnablingExitRoutes runs without an ACL, so tailcfg.FilterAllowAll hides any policy-path regression. Add a sibling that applies the literal #3212 policy via hsic.WithACLPolicy after registration and approval, then asserts each peer carries 0.0.0.0/0 + ::/0 in AllowedIPs and ExitNodeOption is true — the daemon-derived bool that drives `tailscale exit-node list`. Updates #3212