Kristoffer Dalby 5401edb6a8 policy: ignore '#' metadata fields across the whole policy ...

The filter lived in ACL.UnmarshalJSON, so grants, ssh and nodeAttrs still
hit RejectUnknownMembers. Strip the members in the HuJSON AST instead, at
the single decode entrypoint. Grant "app" payloads are left untouched.

Fixes #3479

2026-09-23 09:30:22 +02:00

..

matcher

all: inline deprecated tailcfg capability aliases

2026-08-25 21:59:00 +02:00

policyutil

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00

v2

policy: ignore '#' metadata fields across the whole policy

2026-09-23 09:30:22 +02:00

pm.go

policy,state: key the peer map by node ID

2026-09-10 13:06:13 +02:00

policy_autoapprove_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00

policy_route_approval_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00

policy_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00

policy.go

all: adopt slices helpers

2026-06-17 16:12:19 +02:00

route_approval_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00