Fix exit-node policy test (autogroup:internet invalid in tests) #7
Loading…
Reference in a new issue
No description provided.
Delete branch "fix/policy-internet-test"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
The admin console rejects the policy with
[acl test error]: address autogroup:internet:443: too many colons in address: testaccept/denydestinations arehost:portonly andautogroup:*names are not valid test destinations (Tailscale docs kb/1337, Tests section).Per the documented exit-node testing pattern, the test now targets a public IP literal (TEST-NET-2
198.51.100.8:443), which matches the{"dst": ["autogroup:internet"]}grant — same coverage, parseable syntax.Test destinations are host:port only (kb/1337) — autogroup:* names are not valid there, so autogroup:internet:443 failed to parse ('too many colons'). Test a public IP literal instead: it matches the autogroup:internet exit-node grant, per the documented pattern.