headscale/hscontrol
Kristoffer Dalby 073f11b6bf testdata,policy/v2: add f16/f18 golden captures and fix compat test
f16: CIDR-only bidirectional ACL — proves SaaS makes subnet routers
peers with CIDR-only rules and generates correct filter rules.

f18: CIDR + tag-based ACL — adds tag:ha ↔ tag:router rules.

Fix TestRoutesCompatReduceRoutes to pair src↔dst per-rule instead
of cross-product across all rules. Tag-based rules resolve to node
IPs in filter dests, not subnet CIDRs — a source in the tag rule
should only be tested against that rule's destinations.

Updates #3157
2026-04-13 14:57:55 +00:00
..
assets Swap favicon for updated version 2026-03-03 05:59:40 +01:00
capver capver: regenerate for tailscale v1.96 2026-04-08 13:00:22 +01:00
db hscontrol/types: silence zerolog by default in tests 2026-04-12 19:23:52 +00:00
derp all: fix golangci-lint issues (#3064) 2026-02-06 21:45:32 +01:00
dns Fix typo in comment about fsnotify behavior 2026-02-27 15:23:06 +01:00
mapper hscontrol/types: silence zerolog by default in tests 2026-04-12 19:23:52 +00:00
policy testdata,policy/v2: add f16/f18 golden captures and fix compat test 2026-04-13 14:57:55 +00:00
routes all: upgrade to Go 1.26rc2 and modernize codebase 2026-02-08 12:35:23 +01:00
servertest servertest: approve only SaaS-approved routes in via compat tests 2026-04-13 14:57:39 +00:00
state state: include approved exit routes in RoutesForPeer 2026-04-12 21:40:07 +00:00
templates oidc: add confirmation page for node registration 2026-04-10 14:09:57 +01:00
types ci,lint: fix lint issues and add TestSubnetToSubnetACL to workflow 2026-04-12 21:39:27 +00:00
util hscontrol/types: silence zerolog by default in tests 2026-04-12 19:23:52 +00:00
app.go oidc: add confirmation page for node registration 2026-04-10 14:09:57 +01:00
auth.go auth: check machine key on tailscaled-restart fast path 2026-04-10 14:09:57 +01:00
auth_tags_test.go state: replace zcache with bounded LRU for auth cache 2026-04-10 14:09:57 +01:00
auth_test.go state: replace zcache with bounded LRU for auth cache 2026-04-10 14:09:57 +01:00
debug.go debug: route statsviz through tsweb.Protected 2026-04-10 14:09:57 +01:00
grpcv1.go state: replace zcache with bounded LRU for auth cache 2026-04-10 14:09:57 +01:00
grpcv1_test.go hscontrol: add tests for SetTags user_id database persistence 2026-04-08 14:32:08 +01:00
handlers.go hscontrol: limit /verify request body size 2026-04-10 14:09:57 +01:00
handlers_test.go hscontrol: limit /verify request body size 2026-04-10 14:09:57 +01:00
metrics.go all: fix golangci-lint issues (#3064) 2026-02-06 21:45:32 +01:00
noise.go noise: pass context to sshActionFollowUp 2026-04-10 14:09:57 +01:00
noise_test.go hscontrol: validate machine key and bind src/dst in SSH check handler 2026-04-10 14:09:57 +01:00
oidc.go oidc: add confirmation page for node registration 2026-04-10 14:09:57 +01:00
oidc_confirm_test.go oidc: add confirmation page for node registration 2026-04-10 14:09:57 +01:00
oidc_template_test.go templates: generalise auth templates for web and OIDC 2026-02-25 21:28:05 +01:00
oidc_test.go oidc: make email verification configurable 2025-12-18 11:42:32 +00:00
platform_config.go all: fix golangci-lint issues (#3064) 2026-02-06 21:45:32 +01:00
poll.go types: add node.expiry config, deprecate oidc.expiry 2026-04-08 13:00:22 +01:00
poll_test.go poll: fix poll test linter violations 2026-03-12 01:27:34 -07:00
tailsql.go all: fix golangci-lint issues (#3064) 2026-02-06 21:45:32 +01:00
templates_consistency_test.go templates: generalise auth templates for web and OIDC 2026-02-25 21:28:05 +01:00