headscale/integration
Kristoffer Dalby 51eed414b4 integration: fix ACL tests for address-family-specific resolve
Address-based aliases (Prefix, Host) now resolve to exactly the literal
prefix and do not expand to include the matching node's other IP
addresses. This means an IPv4-only host definition only produces IPv4
filter rules, and an IPv6-only definition only produces IPv6 rules.

Update TestACLDevice1CanAccessDevice2 and TestACLNamedHostsCanReach to
track which addresses each test case covers via test1Addr/test2Addr/
test3Addr fields and only assert connectivity for that family.
Previously the tests assumed all address families would work regardless
of how the policy aliases were defined, which was true only when
address-based aliases auto-expanded to include all of a node's IPs.

The group test case (identity-based) keeps using IPv4 since tags, users,
groups, autogroups and the wildcard still resolve to both IPv4 and IPv6.

Updates #2180
2026-04-08 13:00:22 +01:00
..
dockertestutil integration: add custom subnet support and fix exit node tests 2026-04-01 14:10:42 +01:00
dsic integration: standardize test infrastructure options 2026-03-16 03:57:05 -07:00
hsic integration: standardize test infrastructure options 2026-03-16 03:57:05 -07:00
integrationutil integration: add CI-scaled timeouts and curl helpers for flaky ACL tests 2026-03-31 22:06:25 +02:00
tsic integration/tsic: accept via peer-relay in non-direct ping check 2026-04-08 13:00:22 +01:00
acl_test.go integration: fix ACL tests for address-family-specific resolve 2026-04-08 13:00:22 +01:00
api_auth_test.go integration: use CI-scaled timeouts for all EventuallyWithT assertions 2026-03-31 22:06:25 +02:00
auth_key_test.go integration: scale remaining hardcoded timeouts and replace pingAllHelper 2026-03-31 22:06:25 +02:00
auth_oidc_test.go state: apply default node key expiry on registration 2026-04-08 13:00:22 +01:00
auth_web_flow_test.go integration: scale remaining hardcoded timeouts and replace pingAllHelper 2026-03-31 22:06:25 +02:00
cli_test.go state: apply default node key expiry on registration 2026-04-08 13:00:22 +01:00
control.go integration: add SSH check mode tests 2026-02-25 21:28:05 +01:00
derp_verify_endpoint_test.go integration: standardize test infrastructure options 2026-03-16 03:57:05 -07:00
dns_test.go integration: use CI-scaled timeouts for all EventuallyWithT assertions 2026-03-31 22:06:25 +02:00
embedded_derp_test.go integration: add custom subnet support and fix exit node tests 2026-04-01 14:10:42 +01:00
general_test.go integration: scale remaining hardcoded timeouts and replace pingAllHelper 2026-03-31 22:06:25 +02:00
grant_cap_test.go integration: add custom subnet support and fix exit node tests 2026-04-01 14:10:42 +01:00
helpers.go integration: remove exit node via grant tests 2026-04-01 14:10:42 +01:00
README.md feat: support client verify for derp (add integration tests) (#2046) 2024-11-22 13:23:05 +01:00
route_test.go integration: remove exit node via grant tests 2026-04-01 14:10:42 +01:00
run.sh Fix 764 (#2093) 2024-09-03 09:22:17 +02:00
scenario.go integration: add custom subnet support and fix exit node tests 2026-04-01 14:10:42 +01:00
scenario_test.go integration: standardize test infrastructure options 2026-03-16 03:57:05 -07:00
ssh_test.go integration: use CI-scaled timeouts for all EventuallyWithT assertions 2026-03-31 22:06:25 +02:00
tags_test.go integration: scale remaining hardcoded timeouts and replace pingAllHelper 2026-03-31 22:06:25 +02:00
tailscale.go integration: add cap/relay grant peer relay lifecycle test 2026-04-01 14:10:42 +01:00

Integration testing

Headscale relies on integration testing to ensure we remain compatible with Tailscale.

This is typically performed by starting a Headscale server and running a test "scenario" with an array of Tailscale clients and versions.

Headscale's test framework and the current set of scenarios are defined in this directory.

Tests are located in files ending with _test.go and the framework are located in the rest.

Running integration tests locally

The easiest way to run tests locally is to use act, a local GitHub Actions runner:

act pull_request -W .github/workflows/test-integration.yaml

Alternatively, the docker run command in each GitHub workflow file can be used.

Running integration tests on GitHub Actions

Each test currently runs as a separate workflows in GitHub actions, to add new test, run go generate inside ../cmd/gh-action-integration-generator/ and commit the result.