mirror of
				https://github.com/juanfont/headscale.git
				synced 2025-10-31 08:01:34 +01:00 
			
		
		
		
	* types/node: add helper funcs for node tags Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * types/node: add DebugString method for node Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * policy/v2: add String func to AutoApprover interface Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * policy/v2: simplify, use slices.Contains Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * policy/v2: debug, use nodes.DebugString Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * policy/v1: fix potential nil pointer in NodeCanApproveRoute Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * policy/v1: slices.Contains Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * integration/tsic: fix diff in login commands Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * integration: fix webauth running with wrong scenario Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * integration: move common oidc opts to func Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * integration: require node count, more verbose Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * auth: remove uneffective route approve Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * .github/workflows: fmt Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * integration/tsic: add id func Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * integration: remove call that might be nil Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * integration: test autoapprovers against web/authkey x group/tag/user Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * integration: unique network id per scenario Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * Revert "integration: move common oidc opts to func" This reverts commit 7e9d165d4a900c304f1083b665f1a24a26e06e55. * remove cmd Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * integration: clean docker images between runs in ci Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * integration: run autoapprove test against differnt policy modes Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * integration/tsic: append, not overrwrite extra login args Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> * .github/workflows: remove polv2 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> --------- Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
		
			
				
	
	
		
			129 lines
		
	
	
		
			3.1 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			129 lines
		
	
	
		
			3.1 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| package dockertestutil
 | |
| 
 | |
| import (
 | |
| 	"errors"
 | |
| 	"fmt"
 | |
| 	"log"
 | |
| 	"net"
 | |
| 
 | |
| 	"github.com/juanfont/headscale/hscontrol/util"
 | |
| 	"github.com/ory/dockertest/v3"
 | |
| 	"github.com/ory/dockertest/v3/docker"
 | |
| )
 | |
| 
 | |
| var ErrContainerNotFound = errors.New("container not found")
 | |
| 
 | |
| func GetFirstOrCreateNetwork(pool *dockertest.Pool, name string) (*dockertest.Network, error) {
 | |
| 	networks, err := pool.NetworksByName(name)
 | |
| 	if err != nil {
 | |
| 		return nil, fmt.Errorf("looking up network names: %w", err)
 | |
| 	}
 | |
| 	if len(networks) == 0 {
 | |
| 		if _, err := pool.CreateNetwork(name); err == nil {
 | |
| 			// Create does not give us an updated version of the resource, so we need to
 | |
| 			// get it again.
 | |
| 			networks, err := pool.NetworksByName(name)
 | |
| 			if err != nil {
 | |
| 				return nil, err
 | |
| 			}
 | |
| 
 | |
| 			return &networks[0], nil
 | |
| 		} else {
 | |
| 			return nil, fmt.Errorf("creating network: %w", err)
 | |
| 		}
 | |
| 	}
 | |
| 
 | |
| 	return &networks[0], nil
 | |
| }
 | |
| 
 | |
| func AddContainerToNetwork(
 | |
| 	pool *dockertest.Pool,
 | |
| 	network *dockertest.Network,
 | |
| 	testContainer string,
 | |
| ) error {
 | |
| 	containers, err := pool.Client.ListContainers(docker.ListContainersOptions{
 | |
| 		All: true,
 | |
| 		Filters: map[string][]string{
 | |
| 			"name": {testContainer},
 | |
| 		},
 | |
| 	})
 | |
| 	if err != nil {
 | |
| 		return err
 | |
| 	}
 | |
| 
 | |
| 	err = pool.Client.ConnectNetwork(network.Network.ID, docker.NetworkConnectionOptions{
 | |
| 		Container: containers[0].ID,
 | |
| 	})
 | |
| 	if err != nil {
 | |
| 		return err
 | |
| 	}
 | |
| 
 | |
| 	// TODO(kradalby): This doesn't work reliably, but calling the exact same functions
 | |
| 	// seem to work fine...
 | |
| 	// if container, ok := pool.ContainerByName("/" + testContainer); ok {
 | |
| 	// 	err := container.ConnectToNetwork(network)
 | |
| 	// 	if err != nil {
 | |
| 	// 		return err
 | |
| 	// 	}
 | |
| 	// }
 | |
| 
 | |
| 	return nil
 | |
| }
 | |
| 
 | |
| // RandomFreeHostPort asks the kernel for a free open port that is ready to use.
 | |
| // (from https://github.com/phayes/freeport)
 | |
| func RandomFreeHostPort() (int, error) {
 | |
| 	addr, err := net.ResolveTCPAddr("tcp", "localhost:0")
 | |
| 	if err != nil {
 | |
| 		return 0, err
 | |
| 	}
 | |
| 
 | |
| 	listener, err := net.ListenTCP("tcp", addr)
 | |
| 	if err != nil {
 | |
| 		return 0, err
 | |
| 	}
 | |
| 	defer listener.Close()
 | |
| 	//nolint:forcetypeassert
 | |
| 	return listener.Addr().(*net.TCPAddr).Port, nil
 | |
| }
 | |
| 
 | |
| // CleanUnreferencedNetworks removes networks that are not referenced by any containers.
 | |
| func CleanUnreferencedNetworks(pool *dockertest.Pool) error {
 | |
| 	filter := "name=hs-"
 | |
| 	networks, err := pool.NetworksByName(filter)
 | |
| 	if err != nil {
 | |
| 		return fmt.Errorf("getting networks by filter %q: %w", filter, err)
 | |
| 	}
 | |
| 
 | |
| 	for _, network := range networks {
 | |
| 		if network.Network.Containers == nil || len(network.Network.Containers) == 0 {
 | |
| 			err := pool.RemoveNetwork(&network)
 | |
| 			if err != nil {
 | |
| 				log.Printf("removing network %s: %s", network.Network.Name, err)
 | |
| 			}
 | |
| 		}
 | |
| 	}
 | |
| 
 | |
| 	return nil
 | |
| }
 | |
| 
 | |
| // CleanImagesInCI removes images if running in CI.
 | |
| func CleanImagesInCI(pool *dockertest.Pool) error {
 | |
| 	if !util.IsCI() {
 | |
| 		log.Println("Skipping image cleanup outside of CI")
 | |
| 		return nil
 | |
| 	}
 | |
| 
 | |
| 	images, err := pool.Client.ListImages(docker.ListImagesOptions{})
 | |
| 	if err != nil {
 | |
| 		return fmt.Errorf("getting images: %w", err)
 | |
| 	}
 | |
| 
 | |
| 	for _, image := range images {
 | |
| 		log.Printf("removing image: %s, %v", image.ID, image.RepoTags)
 | |
| 		_ = pool.Client.RemoveImage(image.ID)
 | |
| 	}
 | |
| 
 | |
| 	return nil
 | |
| }
 |