TheArchive/headscale
1
0
Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2024-11-25 02:55:29 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,027 Commits 53 Branches 130 Tags 30 MiB
55ca078f22
Commit Graph

156 Commits

Author SHA1 Message Date
Kristoffer Dalby
da48cf64b3 Set OpenID Connect Expiry 
This commit adds a default OpenID Connect expiry to 180d to align with
Tailscale SaaS (previously infinite or based on token expiry).

In addition, it adds an option use the expiry time from the Token sent
by the OpenID provider. This will typically cause really short expiry
and you should only turn on this option if you know what you are
desiring.

This fixes #1176.

Co-authored-by: Even Holthe <even.holthe@bekk.no>
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2023-01-31 18:55:16 +01:00
Kristoffer Dalby
727d95b477 Improve generated integration tests 
- Save logs from control(headscale) on every run to tmp
- Upgrade nix-actions
- Cancel builds if new commit is pushed
- Fix a sorting bug in user command test

Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2023-01-30 14:43:03 +01:00
Christian Heusel
9f6e546522 modify the test to reflect the changes on the webinterface 
related to 2d44a1c99c17

Signed-off-by: Christian Heusel <christian@heusel.eu>
 2023-01-26 08:33:44 +01:00
Juan Font
9714900db9 Target Tailscale 1.36.0 2023-01-26 07:50:03 +01:00
Kristoffer Dalby
90287a6735 gofumpt 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2023-01-18 15:40:04 +01:00
Kristoffer Dalby
e3a2593344 Rename [Nn]amespace -> [Uu]ser in go code 
Use gopls, ag and perl to rename all occurances of Namespace

Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2023-01-18 15:40:04 +01:00
Motiejus Jakštys
bafb6791d3 oidc: allow reading the client secret from a file 
Currently the most "secret" way to specify the oidc client secret is via
an environment variable `OIDC_CLIENT_SECRET`, which is problematic[1].
Lets allow reading oidc client secret from a file. For extra convenience
the path to the secret will resolve the environment variables.

[1]: https://systemd.io/CREDENTIALS/
 2023-01-14 17:03:57 +01:00
Kristoffer Dalby
93aca81c1c Read integration test config from Env 
This commit sets the Headscale config from env instead of file for
integration tests, the main point is to make sure that when we add per
test config, it properly replaces the config key and not append it or
something similar.

Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2023-01-06 23:06:43 +01:00
Kristoffer Dalby
b3a0c4a63b Add integration readme 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2023-01-06 12:32:24 +01:00
Juan Font
55a3885614 Added integration tests for ephemeral nodes 
Fetch the machines from headscale
 2023-01-05 14:59:02 +01:00
Even Holthe
23a595c26f oidc: add test for expiring nodes after token expiration 2023-01-04 09:23:52 +01:00
Even Holthe
6de26b1d7c Remove Tailscale v1.18.2 from test matrix 2023-01-02 16:06:12 +01:00
Juan Font
3e9ee816f9 Add integration tests for logout with authkey 2022-12-22 20:02:18 +01:00
Juan Font
2494e27a73 Make WaitForTailscaleLogout a Scenario method 2022-12-22 20:02:18 +01:00
Juan Font
b7d7fc57c4 Add logout method to tsic 2022-12-22 00:09:21 +01:00
Juan Font
b54c0e3d22 Add integration tests that check logout and relogin 2022-12-21 20:52:08 +01:00
Juan Font Alonso
2bf576ea8a Disable Tailscale 1.16 in integration tests 2022-12-09 19:11:24 +01:00
Juan Font
52862b8a22 Port integration tests routes CLI to v2 
Fix options signature
 2022-12-06 08:17:14 +01:00
Kristoffer Dalby
7b8cf5ef1a Add 1.34.0 to integration tests 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-12-05 20:41:15 +01:00
Kristoffer Dalby
6f4c6c1876 Ignore tparallel where it doesnt make sense 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-12-01 14:45:11 +01:00
Kristoffer Dalby
c02e105065 Mark the flag properly experimental 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-26 11:53:31 +01:00
Kristoffer Dalby
22da5bfc1d Enable SSH for tests 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-26 11:53:31 +01:00
Kristoffer Dalby
91ed6e2197 Allow WithEnv to be passed multiple times 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-26 11:53:31 +01:00
Kristoffer Dalby
d71aef3b98 Mark all tests with Parallel 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-26 11:53:31 +01:00
Kristoffer Dalby
8a79c2e7ed Do not retry on permission denied in ssh 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-26 11:53:31 +01:00
Kristoffer Dalby
f34e7c341b Strip newline from hostname 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-26 11:53:31 +01:00
Kristoffer Dalby
e28d308796 Add negative tests 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-26 11:53:31 +01:00
Even Holthe
f610be632e SSH: add test between namespaces 2022-11-26 11:53:31 +01:00
Even Holthe
fd6d25b5c1 SSH: Lint and typos 2022-11-26 11:53:31 +01:00
Kristoffer Dalby
3695284286 Make simple initial test case 
This commit makes the initial SSH test a bit simpler:

- Use the same pattern/functions for all clients as other tests
- Only test within _one_ namespace/user to confirm the base case
- Use retry function, same as taildrop, there is some funky going on
  there...

Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-26 11:53:31 +01:00
Kristoffer Dalby
cfaa36e51a Add method to expose container id 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-26 11:53:31 +01:00
Even Holthe
519f22f9bf SSH integration test setup 2022-11-26 11:53:31 +01:00
Kristoffer Dalby
e7f322b9b6 Mark all tests to run in parallel 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-22 13:18:58 +01:00
Juan Font
1b0e80bb10
Add OIDC integration tests 
* Port OIDC integration tests to v2

* Move Tailscale old versions to TS2019 list

* Remove Alpine Linux container

* Updated changelog

* Releases: use flavor to set the tag suffix

* Added more debug messages in OIDC registration

* Added more logging

* Do not strip nodekey prefix on handle expired

* Updated changelog

* Add WithHostnameAsServerURL option func

* Reduce the number of namespaces and use hsic.WithHostnameAsServerURL

* Linting fix

* Fix linting issues

* Wait for ready outside the up goroutine

* Minor change in log message

* Add prefix to env var

* Remove unused env var

Co-authored-by: Juan Font <juan.font@esa.int>
Co-authored-by: Steven Honson <steven@honson.id.au>
Co-authored-by: Kristoffer Dalby <kristoffer@dalby.cc>
 2022-11-21 21:51:54 +01:00
Kristoffer Dalby
4ccc528d96 Remove some very verbose error outputs 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-21 14:37:50 +01:00
Juan Font
d461097247 Remove mTLS stuff from code 2022-11-19 19:50:34 +01:00
Juan Font
f90a3c196c Move TS WaitForReady outside up goroutine 2022-11-19 17:16:08 +01:00
Juan Font
9269dd01f5 Move Tailscale old versions to TS2019 list 2022-11-14 23:06:30 +01:00
Kristoffer Dalby
46df219ed3 Add testname identifier to hs container 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-14 16:50:28 +01:00
Kristoffer Dalby
835288d864 Remove unused variable 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-14 16:50:28 +01:00
Kristoffer Dalby
93d56362af Lock and unify headscale start/get method 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-14 16:50:28 +01:00
Kristoffer Dalby
4799859be0 Fix renamed method 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-14 16:50:28 +01:00
Kristoffer Dalby
8e44596171 less verbose command output 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-14 16:50:28 +01:00
Kristoffer Dalby
d479234058 Split ts versions into 2019/2021 for dedicated tests later 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-14 16:50:28 +01:00
Kristoffer Dalby
3fc5866de0 Remove duplicate function 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-14 16:50:28 +01:00
Kristoffer Dalby
f3c40086ac Make TLS setup work automatically 
This commit injects the per-test-generated tls certs into the tailscale
container and makes sure all can ping all. It does not test any of the
DERP isolation yet.

Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-14 16:50:28 +01:00
Kristoffer Dalby
09ed21edd8 Remove duplicate function 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-14 16:50:28 +01:00
Kristoffer Dalby
456479eaa1 Rename and move wait for headscale 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-14 16:50:28 +01:00
Kristoffer Dalby
cb87852825 Add nolint to gosec stuff that doesnt matter because test 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-14 16:50:28 +01:00
Kristoffer Dalby
69440058bb Clean up cert function 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-14 16:50:28 +01:00
Kristoffer Dalby
9bc6ac0f35 Make TLS setup work automatically 
This commit injects the per-test-generated tls certs into the tailscale
container and makes sure all can ping all. It does not test any of the
DERP isolation yet.

Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-14 16:50:28 +01:00
Juan Font Alonso
89ff5c83d2 Add web flow auth integration tests 2022-11-14 08:47:02 +01:00
Juan Font Alonso
0a47d694be Return the real port of the container 2022-11-14 08:47:02 +01:00
Juan Font Alonso
a9251d6652 Fixed linter issues 2022-11-13 22:33:41 +01:00
Juan Font Alonso
f9c44f11d6 Added method to run tailscale up without authkey 2022-11-13 22:33:41 +01:00
Juan Font Alonso
1f8bd24a0d Return stderr in tsic.Execute 2022-11-13 22:33:41 +01:00
Juan Font Alonso
7bf2eb3d71 Update Tailscale interface with new Execute signature 2022-11-13 22:33:41 +01:00
Juan Font Alonso
9989657c0f Wait for tailscale client to be ready after tailscale up 2022-11-13 18:30:00 +01:00
Juan Font Alonso
cb2790984f Added WaitForReady() to Tailscale interface 
When using running `tailscale up` in the AuthKey flow process, the tailscale client immediately enters PollMap after registration - avoiding a race condition.

When using the web auth (up -> go to the Control website -> CLI `register`) the client is polling checking if it has been authorized. If we immediately ask for the client IP, as done in CreateHeadscaleEnv() we might have the client in NotReady status.

This method provides a way to wait for the client to be ready.

Signed-off-by: Juan Font Alonso <juanfontalonso@gmail.com>
 2022-11-13 18:30:00 +01:00
Kristoffer Dalby
d8c856e602 Add basic accept all acl to all test as example 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-03 12:53:00 +01:00
Kristoffer Dalby
aad4c90fe6 Add options to hsic, ACL and env overrides 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-03 12:53:00 +01:00
Kristoffer Dalby
4f9fe93146 golangci-lint --fix 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-03 12:53:00 +01:00
Kristoffer Dalby
96fe6aa3a1 Remove unused func, comment out configobject way 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-03 12:53:00 +01:00
Kristoffer Dalby
947e961a3a Write headcsale config file from code, not depend on directory 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-03 12:53:00 +01:00
Kristoffer Dalby
43731cad2e Add helper function to add files to hs container 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-03 12:53:00 +01:00
Kristoffer Dalby
ac15b21720 Remove tab from YAML 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-03 12:53:00 +01:00
Kristoffer Dalby
dfc03a6124 Ditch stupid distroless image for debug/test 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-11-03 12:53:00 +01:00
Kristoffer Dalby
7e6ab19270
Port preauthkey subcommand tests 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-26 10:23:44 +02:00
Kristoffer Dalby
5013187aaf
Add some sort stability 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-26 10:23:44 +02:00
Kristoffer Dalby
239ef16ad1
Add preauthkey command test 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-26 10:23:44 +02:00
Kristoffer Dalby
cb61a490e0
Add namespace command test 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-26 10:23:44 +02:00
Kristoffer Dalby
2c0488da0b
Add Execute helper for controlserver 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-26 10:23:44 +02:00
Kristoffer Dalby
fe4e05b0bc
only print stdout on err 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-25 09:24:05 +02:00
Kristoffer Dalby
7015d72911
port resolve magicdns test 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-24 14:59:14 +02:00
Kristoffer Dalby
76689c221d
remove fixed todo 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-24 14:58:02 +02:00
Kristoffer Dalby
018b1d68f2
Migrate taildrop test to v2 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-23 14:13:22 +02:00
Kristoffer Dalby
7155b22043
Factor out some commonly used patterns 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-23 12:41:35 +02:00
Kristoffer Dalby
40c048fb45
Fix lint 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-23 12:01:03 +02:00
Kristoffer Dalby
53b4bb220d
Fixup after ts interface 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-23 11:55:37 +02:00
Kristoffer Dalby
d706c3516d
Remove 1.16 from FQDN, bump 1.32.1 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-23 11:50:19 +02:00
Kristoffer Dalby
cbbf9fbdef
Use FQDN from tailscale client 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-23 11:50:19 +02:00
Kristoffer Dalby
d8144ee2ed
Add initial pingallbyhostname 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-23 11:50:16 +02:00
Kristoffer Dalby
fa3d21cbc0
Rename pingall test to signal ip 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-23 11:50:03 +02:00
Kristoffer Dalby
d242ceac46
Make hostname dns safe, allow string in ping command 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-23 11:50:01 +02:00
Kristoffer Dalby
e112514a3b
Merge branch 'main' into integration-ts-interface 2022-10-21 15:37:21 +02:00
Kristoffer Dalby
bc1c1f5ce8
Fix most nil pointers, actually make it check for unique across headscale 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-21 14:42:37 +02:00
Kristoffer Dalby
c9823ce347
Use TailscaleClient interface instead of tsic 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-21 13:17:54 +02:00
Kristoffer Dalby
8c4744acd9
make TailscaleClient interface 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-21 13:17:38 +02:00
Kristoffer Dalby
6d8c18d4de
Fix golangcilint 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-18 15:37:11 +02:00
Kristoffer Dalby
12ee9bc02d
Fix golangcilint 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-18 15:37:11 +02:00
Kristoffer Dalby
36ad0003a9
golangci-lint --fix 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-18 15:37:11 +02:00
Kristoffer Dalby
39bc6f7e01
Port PingAll test to new test suite 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-18 15:37:11 +02:00
Kristoffer Dalby
0db608a7b7
Add tailscale versions, waiters and helpers for scenario 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-18 15:37:11 +02:00
Kristoffer Dalby
3951f39868
Add wait for peers and status to tsic 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-18 15:37:11 +02:00
Kristoffer Dalby
c90d0dd843
remove the need to bind host port 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-18 15:37:11 +02:00
Kristoffer Dalby
aef77a113c
use variable for namespace 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-18 15:37:11 +02:00
Kristoffer Dalby
13aa845c69
Add comment about scenario test 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-18 15:37:11 +02:00
Kristoffer Dalby
b0a4ee4dfe
test login with one node 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-18 15:37:11 +02:00
Kristoffer Dalby
25e39d9ff9
Add get ips command to scenario 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-18 15:37:11 +02:00
Kristoffer Dalby
f109b54e79
Join test suite container to network, allowing seperate networks 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
 2022-10-18 15:37:11 +02:00