mirror of
https://github.com/juanfont/headscale.git
synced 2026-11-01 11:14:09 +09:00
Kristoffer Dalby
c504f891cf
Recapture all golden test data from Tailscale SaaS with: - All 19 nodes online (12 routes + 7 grant v2 topology) - All routes approved via API - Trimmed netmap data per capture (Peers with AllowedIPs, PrimaryRoutes, Tags; SelfNode with RoutableIPs) - 20-30s propagation wait for correct data Topology expanded from netmap peers to include all 19 nodes that contribute to filter rule SrcIPs. Each node has routable_ips and approved_routes derived from netmap SelfNode data. New files: b11-b16 (autogroup:internet), i8-i9 (IPv6 fd00:1::/64), pa1-pa2 (partial route approval), V31-SLOW. Updates #3157 Updates #3169
79 lines
1.7 KiB
Plaintext
79 lines
1.7 KiB
Plaintext
// ACL-SF04
|
|
//
|
|
// ACL: accept: src=['webserver'] dst=['autogroup:self:*']
|
|
{
|
|
"test_id": "ACL-SF04",
|
|
"timestamp": "2026-04-05T20:51:40Z",
|
|
"error": true,
|
|
"input": {
|
|
"policy_file": "acl_policies/acl_sf04.json",
|
|
"full_policy": {
|
|
"groups": {
|
|
"group:admins": [
|
|
"kratail2tid@passkey"
|
|
],
|
|
"group:developers": [
|
|
"kristoffer@dalby.cc",
|
|
"kratail2tid@passkey"
|
|
],
|
|
"group:monitors": [
|
|
"monitorpasskeykradalby@passkey"
|
|
],
|
|
"group:empty": []
|
|
},
|
|
"tagOwners": {
|
|
"tag:server": [
|
|
"kratail2tid@passkey"
|
|
],
|
|
"tag:prod": [
|
|
"kratail2tid@passkey"
|
|
],
|
|
"tag:client": [
|
|
"kratail2tid@passkey"
|
|
],
|
|
"tag:router": [
|
|
"kratail2tid@passkey"
|
|
],
|
|
"tag:exit": [
|
|
"kratail2tid@passkey"
|
|
]
|
|
},
|
|
"hosts": {
|
|
"webserver": "100.108.74.26",
|
|
"prodbox": "100.103.8.15",
|
|
"internal": "10.0.0.0/8",
|
|
"subnet24": "192.168.1.0/24"
|
|
},
|
|
"autoApprovers": {
|
|
"routes": {
|
|
"10.33.0.0/16": [
|
|
"tag:router"
|
|
],
|
|
"0.0.0.0/0": [
|
|
"tag:exit"
|
|
],
|
|
"::/0": [
|
|
"tag:exit"
|
|
]
|
|
}
|
|
},
|
|
"acls": [
|
|
{
|
|
"action": "accept",
|
|
"src": [
|
|
"webserver"
|
|
],
|
|
"dst": [
|
|
"autogroup:self:*"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"api_endpoint": "https://api.tailscale.com/api/v2/tailnet/kratail2tid%40passkey/acl",
|
|
"api_response_code": 400,
|
|
"api_response_body": {
|
|
"message": "autogroup:self can only be used with users, groups, or supported autogroups"
|
|
}
|
|
}
|
|
}
|