headscale/integration/ssh_test.go

package integration

import (
	"fmt"
	"testing"

	"github.com/juanfont/headscale"
)

func TestSSHIntoAll(t *testing.T) {
	IntegrationSkip(t)

	scenario, err := NewScenario()
	if err != nil {
		t.Errorf("failed to create scenario: %s", err)
	}

	spec := &HeadscaleSpec{
		namespaces: map[string]int{
			// Omit versions before 1.24 because they don't support SSH
			"namespace1": len(TailscaleVersions) - 4,
			"namespace2": len(TailscaleVersions) - 4,
		},
		enableSSH: true,
		acl: &headscale.ACLPolicy{
			Groups: map[string][]string{
				"group:integration-test": {"namespace1", "namespace2"},
			},
			ACLs: []headscale.ACL{
				{
					Action:       "accept",
					Sources:      []string{"*"},
					Destinations: []string{"*:*"},
				},
			},
			SSHs: []headscale.SSH{
				{
					Action:       "accept",
					Sources:      []string{"group:integration-test"},
					Destinations: []string{"group:integration-test"},
					Users:        []string{"ssh-it-user"},
				},
			},
		},
	}

	err = scenario.CreateHeadscaleEnv(spec)
	if err != nil {
		t.Errorf("failed to create headscale environment: %s", err)
	}
	err = scenario.WaitForTailscaleSync()
	if err != nil {
		t.Errorf("failed wait for tailscale clients to be in sync: %s", err)
	}

	for namespace := range spec.namespaces {
		// This will essentially fetch and cache all the FQDNs for the given namespace
		nsFQDNs, err := scenario.ListTailscaleClientsFQDNs(namespace)
		if err != nil {
			t.Errorf("failed to get FQDNs: %s", err)
		}

		nsClients, err := scenario.ListTailscaleClients(namespace)
		if err != nil {
			t.Errorf("failed to get clients: %s", err)
		}

		for _, client := range nsClients {
			currentClientFqdn, _ := client.FQDN()
			sshTargets := removeFromSlice(nsFQDNs, currentClientFqdn)

			for _, target := range sshTargets {
				t.Run(
					fmt.Sprintf("%s-%s", currentClientFqdn, target),
					func(t *testing.T) {
						command := []string{
							"ssh", "-o StrictHostKeyChecking=no",
							fmt.Sprintf("%s@%s", "ssh-it-user", target),
							"'hostname'",
						}

						result, err := client.Execute(command)
						if err != nil {
							t.Errorf("failed to execute command over SSH: %s", err)
						}

						if result != target {
							t.Logf("result=%s, target=%s", result, target)
							t.Fail()
						}

						t.Logf("Result for %s: %s\n", target, result)
					},
				)
			}

			// t.Logf("%s wants to SSH into %+v", currentClientFqdn, sshTargets)
		}
	}

	err = scenario.Shutdown()
	if err != nil {
		t.Errorf("failed to tear down scenario: %s", err)
	}
}

func removeFromSlice(haystack []string, needle string) []string {
	for i, value := range haystack {
		if needle == value {
			return append(haystack[:i], haystack[i+1:]...)
		}
	}

	return haystack
}