Kristoffer Dalby 850c5d3fbb policy: offer exit routes only to viewers whose rules reach the internet ...

Every destination overlaps /0, so any rule offered a peer's exit routes.
They now need a rule to the internet, the test exit-node visibility
uses; via steering defers them to a regular grant only on that test.

2026-10-28 00:51:40 +00:00

..

testdata

policy/v2: recapture SSH data captures

2026-10-27 21:31:36 +00:00

canaccess_equiv_test.go

policy/matcher, types: compare a node's routes to matchers as ranges

2026-10-28 00:51:39 +00:00

compiled_test.go

policy/v2: reuse grant destination resolutions

2026-10-22 22:17:36 +02:00

compiled.go

policy: reduce merged destination prefixes to the node's own addresses

2026-10-28 00:51:40 +00:00

filter_test.go

policy: reduce merged destination prefixes to the node's own addresses

2026-10-28 00:51:40 +00:00

filter.go

policy/v2: map login 0 to no local user in SSH rules

2026-10-27 21:32:32 +00:00

issue_3212_test.go

policy,state: key the peer map by node ID

2026-09-10 13:06:13 +02:00

issue_3233_test.go

policy: offer exit routes only to viewers whose rules reach the internet

2026-10-28 00:51:40 +00:00

issue_3267_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00

main_test.go

all: fix test flakiness and improve test infrastructure

2026-03-14 02:52:28 -07:00

node_recompute_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00

nodeattrs_test.go

policy/v2: resolve unregistered users to an empty set

2026-10-07 11:10:51 +02:00

peermap_scan_test.go

policy/matcher, types: compare a node's routes to matchers as ranges

2026-10-28 00:51:39 +00:00

policy_concurrency_test.go

policy/v2: stop ViaRoutesForPeer appending into pm.pol.Grants

2026-10-07 11:10:38 +02:00

policy_test.go

policy/matcher: binary-search ranges in overlap checks

2026-10-28 00:51:39 +00:00

policy.go

policy: offer exit routes only to viewers whose rules reach the internet

2026-10-28 00:51:40 +00:00

policytester_compat_test.go

policy/v2: index compiled SSH rules by source for sshTests

2026-10-28 00:51:39 +00:00

sshtest_test.go

policy/v2: index compiled SSH rules by source for sshTests

2026-10-28 00:51:39 +00:00

sshtest.go

policy/v2: index compiled SSH rules by source for sshTests

2026-10-28 00:51:39 +00:00

sshtester_compat_test.go

policy/v2: label sshTests failures with the dst alias

2026-10-28 00:51:39 +00:00

tagowner_compat_test.go

policy/v2: resolve tag owners one hop deep

2026-10-27 21:32:32 +00:00

tailnet_state_caps.go

policy/v2: suggest approved exit nodes by default

2026-09-23 14:48:45 +02:00

tailscale_acl_data_compat_test.go

policy: reduce merged destination prefixes to the node's own addresses

2026-10-28 00:51:40 +00:00

tailscale_grants_compat_test.go

policy: reduce merged destination prefixes to the node's own addresses

2026-10-28 00:51:40 +00:00

tailscale_nodeattrs_compat_test.go

policy/v2: add user token captures

2026-10-27 21:30:36 +00:00

tailscale_routes_data_compat_test.go

policy: offer exit routes only to viewers whose rules reach the internet

2026-10-28 00:51:40 +00:00

tailscale_sequence_compat_test.go

policy/v2: map login 0 to no local user in SSH rules

2026-10-27 21:32:32 +00:00

tailscale_ssh_data_compat_test.go

policy/v2: refuse check SSH rules with tag sources

2026-10-28 00:51:39 +00:00

tailscale_users_compat_test.go

policy/v2: map login 0 to no local user in SSH rules

2026-10-27 21:32:32 +00:00

test_test.go

policy/v2: evaluate policy tests before taking the write lock

2026-10-28 00:51:39 +00:00

test.go

policy/v2: parse the compiled filter once per tests run

2026-10-28 00:51:39 +00:00

types_test.go

policy/v2: refuse check SSH rules with tag sources

2026-10-28 00:51:39 +00:00

types.go

api, policy/v2: refuse route prefixes with host bits

2026-10-28 00:51:39 +00:00

utils_test.go

chore: fix function comment to match actual function name

2026-07-03 07:27:08 +02:00

utils.go

all: use strings.CutLast

2026-08-25 21:59:00 +02:00