headscale/integration
Kristoffer Dalby a739862c65 integration: add via grant route steering tests
Add integration tests validating that via grants correctly steer
routes to designated nodes per client group:

- TestGrantViaSubnetSteering: two routers advertise the same
  subnet, via grants steer each client group to a specific router.
  Verifies per-client route visibility, curl reachability, and
  traceroute path.

- TestGrantViaExitNodeSteering: two exit nodes, via grants steer
  each client group to a designated exit node. Verifies exit
  routes are withdrawn from non-designated nodes and the client
  rejects setting a non-designated exit node.

- TestGrantViaMixedSteering: cross-steering where subnet routes
  and exit routes go to different servers per client group.
  Verifies subnet traffic uses the subnet-designated server while
  exit traffic uses the exit-designated server.

Also add autogroupp helper for constructing AutoGroup aliases in
grant policy configurations.

Updates #2180
2026-04-01 14:10:42 +01:00
..
dockertestutil integration: make docker execute and ping timeouts CI-aware 2026-03-31 22:06:25 +02:00
dsic integration: standardize test infrastructure options 2026-03-16 03:57:05 -07:00
hsic integration: standardize test infrastructure options 2026-03-16 03:57:05 -07:00
integrationutil integration: add CI-scaled timeouts and curl helpers for flaky ACL tests 2026-03-31 22:06:25 +02:00
tsic integration: make docker execute and ping timeouts CI-aware 2026-03-31 22:06:25 +02:00
acl_test.go integration: scale remaining hardcoded timeouts and replace pingAllHelper 2026-03-31 22:06:25 +02:00
api_auth_test.go integration: use CI-scaled timeouts for all EventuallyWithT assertions 2026-03-31 22:06:25 +02:00
auth_key_test.go integration: scale remaining hardcoded timeouts and replace pingAllHelper 2026-03-31 22:06:25 +02:00
auth_oidc_test.go integration: scale remaining hardcoded timeouts and replace pingAllHelper 2026-03-31 22:06:25 +02:00
auth_web_flow_test.go integration: scale remaining hardcoded timeouts and replace pingAllHelper 2026-03-31 22:06:25 +02:00
cli_test.go integration: use CI-scaled timeouts for all EventuallyWithT assertions 2026-03-31 22:06:25 +02:00
control.go integration: add SSH check mode tests 2026-02-25 21:28:05 +01:00
derp_verify_endpoint_test.go integration: standardize test infrastructure options 2026-03-16 03:57:05 -07:00
dns_test.go integration: use CI-scaled timeouts for all EventuallyWithT assertions 2026-03-31 22:06:25 +02:00
embedded_derp_test.go integration: use CI-scaled timeouts for all EventuallyWithT assertions 2026-03-31 22:06:25 +02:00
general_test.go integration: scale remaining hardcoded timeouts and replace pingAllHelper 2026-03-31 22:06:25 +02:00
helpers.go integration: add via grant route steering tests 2026-04-01 14:10:42 +01:00
README.md feat: support client verify for derp (add integration tests) (#2046) 2024-11-22 13:23:05 +01:00
route_test.go integration: add via grant route steering tests 2026-04-01 14:10:42 +01:00
run.sh Fix 764 (#2093) 2024-09-03 09:22:17 +02:00
scenario.go integration: add SSH check mode tests 2026-02-25 21:28:05 +01:00
scenario_test.go integration: standardize test infrastructure options 2026-03-16 03:57:05 -07:00
ssh_test.go integration: use CI-scaled timeouts for all EventuallyWithT assertions 2026-03-31 22:06:25 +02:00
tags_test.go integration: scale remaining hardcoded timeouts and replace pingAllHelper 2026-03-31 22:06:25 +02:00
tailscale.go hscontrol/state: allow expired auth keys for node re-registration 2025-11-11 05:12:59 -06:00

Integration testing

Headscale relies on integration testing to ensure we remain compatible with Tailscale.

This is typically performed by starting a Headscale server and running a test "scenario" with an array of Tailscale clients and versions.

Headscale's test framework and the current set of scenarios are defined in this directory.

Tests are located in files ending with _test.go and the framework are located in the rest.

Running integration tests locally

The easiest way to run tests locally is to use act, a local GitHub Actions runner:

act pull_request -W .github/workflows/test-integration.yaml

Alternatively, the docker run command in each GitHub workflow file can be used.

Running integration tests on GitHub Actions

Each test currently runs as a separate workflows in GitHub actions, to add new test, run go generate inside ../cmd/gh-action-integration-generator/ and commit the result.