mirror of
https://github.com/juanfont/headscale.git
synced 2024-10-17 20:05:55 +02:00
da48cf64b3
This commit adds a default OpenID Connect expiry to 180d to align with Tailscale SaaS (previously infinite or based on token expiry). In addition, it adds an option use the expiry time from the Token sent by the OpenID provider. This will typically cause really short expiry and you should only turn on this option if you know what you are desiring. This fixes #1176. Co-authored-by: Even Holthe <even.holthe@bekk.no> Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
59 lines
1.7 KiB
YAML
59 lines
1.7 KiB
YAML
|
|
# DO NOT EDIT, generated with cmd/gh-action-integration-generator/main.go
|
|
# To regenerate, run "go generate" in cmd/gh-action-integration-generator/
|
|
|
|
name: Integration Test v2 - TestOIDCExpireNodesBasedOnTokenExpiry
|
|
|
|
on: [pull_request]
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-$${{ github.head_ref || github.run_id }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
test:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
with:
|
|
fetch-depth: 2
|
|
|
|
- name: Get changed files
|
|
id: changed-files
|
|
uses: tj-actions/changed-files@v34
|
|
with:
|
|
files: |
|
|
*.nix
|
|
go.*
|
|
**/*.go
|
|
integration_test/
|
|
config-example.yaml
|
|
|
|
- uses: cachix/install-nix-action@v18
|
|
if: ${{ env.ACT }} || steps.changed-files.outputs.any_changed == 'true'
|
|
|
|
- name: Run general integration tests
|
|
if: steps.changed-files.outputs.any_changed == 'true'
|
|
run: |
|
|
nix develop --command -- docker run \
|
|
--tty --rm \
|
|
--volume ~/.cache/hs-integration-go:/go \
|
|
--name headscale-test-suite \
|
|
--volume $PWD:$PWD -w $PWD/integration \
|
|
--volume /var/run/docker.sock:/var/run/docker.sock \
|
|
--volume $PWD/control_logs:/tmp/control \
|
|
golang:1 \
|
|
go test ./... \
|
|
-tags ts2019 \
|
|
-failfast \
|
|
-timeout 120m \
|
|
-parallel 1 \
|
|
-run "^TestOIDCExpireNodesBasedOnTokenExpiry$"
|
|
|
|
- uses: actions/upload-artifact@v3
|
|
if: always() && steps.changed-files.outputs.any_changed == 'true'
|
|
with:
|
|
name: logs
|
|
path: "control_logs/*.log"
|