Kristoffer Dalby 013dea4f40 policy/v2: evaluate sshTests at write boundary ...

SetPolicy and policy check now compile per-dst SSH rules and replay each sshTests entry. The accept assertion treats check-action rules as reachable; the check assertion requires HoldAndDelegate on the matching rule. Boot reload warns and continues.

2026-05-13 21:10:13 +02:00

..

matcher

policy/matcher: include CapGrant.Dsts in match destinations

2026-05-11 14:55:06 +01:00

policyutil

policy: surface exit nodes via autogroup:internet (#3212)

2026-04-29 11:24:33 +01:00

v2

policy/v2: evaluate sshTests at write boundary

2026-05-13 21:10:13 +02:00

pm.go

policy/v2: parse, validate, and compile nodeAttrs

2026-05-13 14:22:30 +02:00

policy_autoapprove_test.go

policy/v2: refactor alias resolution to use ResolvedAddresses

2026-04-01 14:10:42 +01:00

policy_route_approval_test.go

all: apply golangci-lint 2.9.0 fixes

2026-02-19 08:21:23 +01:00

policy_test.go

policy/v2: align SSH rule validation with Tailscale

2026-05-13 21:10:13 +02:00

policy.go

all: upgrade to Go 1.26rc2 and modernize codebase

2026-02-08 12:35:23 +01:00

route_approval_test.go

all: upgrade to Go 1.26rc2 and modernize codebase

2026-02-08 12:35:23 +01:00