Kristoffer Dalby fa94bd949c state: include approved exit routes in RoutesForPeer ...

SaaS golden data (routes-ea* captures) proves that approved exit
routes appear in every peer's AllowedIPs. The previous commit
incorrectly dropped them based on a via-grant scenario where
exit routes were not approved.

TestRoutesCompatPeerAllowedIPs validates this against all captured
netmaps: peer AllowedIPs = node IPs + HA primary routes + exit
routes, filtered through ReduceRoutes.

Updates #3157

2026-04-12 21:40:07 +00:00

..

matcher

policy/matcher: add unit tests

2026-04-12 19:05:12 +00:00

policyutil

policyutil: reduce filter rules by approved routes

2026-04-12 19:23:52 +00:00

v2

state: include approved exit routes in RoutesForPeer

2026-04-12 21:40:07 +00:00

pm.go

policy/v2,state,mapper: implement per-viewer via route steering

2026-04-01 14:10:42 +01:00

policy_autoapprove_test.go

policy/v2: refactor alias resolution to use ResolvedAddresses

2026-04-01 14:10:42 +01:00

policy_route_approval_test.go

all: apply golangci-lint 2.9.0 fixes

2026-02-19 08:21:23 +01:00

policy_test.go

types,policy: add tests for subnet-to-subnet route visibility

2026-04-10 13:11:11 +00:00

policy.go

all: upgrade to Go 1.26rc2 and modernize codebase

2026-02-08 12:35:23 +01:00

route_approval_test.go

all: upgrade to Go 1.26rc2 and modernize codebase

2026-02-08 12:35:23 +01:00