Kristoffer Dalby fa6b46bfd9 policy/v2: need every dst node for a tests accept, no range sources ...

An accept passes only when each node behind the dst is reached, as on
Tailscale SaaS; a deny keeps its rule. A CIDR, "*" or autogroup:tagged
src names no user or host, so its test fails.

2026-11-02 17:46:51 +00:00

..

matcher

all: inline deprecated tailcfg capability aliases

2026-08-25 21:59:00 +02:00

policyutil

policyutil: match DstPorts as ranges when reducing filters

2026-10-23 18:23:53 +02:00

v2

policy/v2: need every dst node for a tests accept, no range sources

2026-11-02 17:46:51 +00:00

pm.go

policy/v2: resolve tag owners one hop deep

2026-11-02 17:46:50 +00:00

policy_autoapprove_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00

policy_route_approval_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00

policy_test.go

policy/v2: map login 0 to no local user in SSH rules

2026-11-02 17:46:51 +00:00

policy.go

mapper: take peer visibility from the peer map only

2026-09-23 14:48:35 +02:00

route_approval_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00