116 lines
2.7 KiB
Go
116 lines
2.7 KiB
Go
|
package integration
|
||
|
|
|
||
|
|
import (
|
||
|
|
"fmt"
|
||
|
|
"testing"
|
||
|
|
|
||
|
|
"github.com/juanfont/headscale"
|
||
|
|
)
|
||
|
|
|
||
|
|
func TestSSHIntoAll(t *testing.T) {
|
||
|
|
IntegrationSkip(t)
|
||
|
|
|
||
|
|
scenario, err := NewScenario()
|
||
|
|
if err != nil {
|
||
|
|
t.Errorf("failed to create scenario: %s", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
spec := &HeadscaleSpec{
|
||
|
|
namespaces: map[string]int{
|
||
|
|
// Omit versions before 1.24 because they don't support SSH
|
||
|
|
"namespace1": len(TailscaleVersions) - 4,
|
||
|
|
"namespace2": len(TailscaleVersions) - 4,
|
||
|
|
},
|
||
|
|
enableSSH: true,
|
||
|
|
acl: &headscale.ACLPolicy{
|
||
|
|
Groups: map[string][]string{
|
||
|
|
"group:integration-test": {"namespace1", "namespace2"},
|
||
|
|
},
|
||
|
|
ACLs: []headscale.ACL{
|
||
|
|
{
|
||
|
|
Action: "accept",
|
||
|
|
Sources: []string{"*"},
|
||
|
|
Destinations: []string{"*:*"},
|
||
|
|
},
|
||
|
|
},
|
||
|
|
SSHs: []headscale.SSH{
|
||
|
|
{
|
||
|
|
Action: "accept",
|
||
|
|
Sources: []string{"group:integration-test"},
|
||
|
|
Destinations: []string{"group:integration-test"},
|
||
|
|
Users: []string{"ssh-it-user"},
|
||
|
|
},
|
||
|
|
},
|
||
|
|
},
|
||
|
|
}
|
||
|
|
|
||
|
|
err = scenario.CreateHeadscaleEnv(spec)
|
||
|
|
if err != nil {
|
||
|
|
t.Errorf("failed to create headscale environment: %s", err)
|
||
|
|
}
|
||
|
|
err = scenario.WaitForTailscaleSync()
|
||
|
|
if err != nil {
|
||
|
|
t.Errorf("failed wait for tailscale clients to be in sync: %s", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
for namespace := range spec.namespaces {
|
||
|
|
// This will essentially fetch and cache all the FQDNs for the given namespace
|
||
|
|
nsFQDNs, err := scenario.ListTailscaleClientsFQDNs(namespace)
|
||
|
|
if err != nil {
|
||
|
|
t.Errorf("failed to get FQDNs: %s", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
nsClients, err := scenario.ListTailscaleClients(namespace)
|
||
|
|
if err != nil {
|
||
|
|
t.Errorf("failed to get clients: %s", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
for _, client := range nsClients {
|
||
|
|
currentClientFqdn, _ := client.FQDN()
|
||
|
|
sshTargets := removeFromSlice(nsFQDNs, currentClientFqdn)
|
||
|
|
|
||
|
|
for _, target := range sshTargets {
|
||
|
|
t.Run(
|
||
|
|
fmt.Sprintf("%s-%s", currentClientFqdn, target),
|
||
|
|
func(t *testing.T) {
|
||
|
|
command := []string{
|
||
|
|
"ssh", "-o StrictHostKeyChecking=no",
|
||
|
|
fmt.Sprintf("%s@%s", "ssh-it-user", target),
|
||
|
|
"'hostname'",
|
||
|
|
}
|
||
|
|
|
||
|
|
result, err := client.Execute(command)
|
||
|
|
if err != nil {
|
||
|
|
t.Errorf("failed to execute command over SSH: %s", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
if result != target {
|
||
|
|
t.Logf("result=%s, target=%s", result, target)
|
||
|
|
t.Fail()
|
||
|
|
}
|
||
|
|
|
||
|
|
t.Logf("Result for %s: %s\n", target, result)
|
||
|
|
},
|
||
|
|
)
|
||
|
|
}
|
||
|
|
|
||
|
|
// t.Logf("%s wants to SSH into %+v", currentClientFqdn, sshTargets)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
err = scenario.Shutdown()
|
||
|
|
if err != nil {
|
||
|
|
t.Errorf("failed to tear down scenario: %s", err)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
func removeFromSlice(haystack []string, needle string) []string {
|
||
|
|
for i, value := range haystack {
|
||
|
|
if needle == value {
|
||
|
|
return append(haystack[:i], haystack[i+1:]...)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
return haystack
|
||
|
|
}
|