Kristoffer Dalby 54db47badc policy/v2: implement via route compilation for grants ...

Compile grants with "via" field into FilterRules that are placed only
on nodes matching the via tag and actually advertising the destination
subnets. Key behavior:

- Filter rules go exclusively to via-nodes with matching approved routes
- Destination subnets not advertised by the via node are silently dropped
- App-only via grants (no ip field) produce no packet filter rules
- Via grants are skipped in the global compileFilterRules since they
  are node-specific

Reduces grant compat test skips from 41 to 30 (11 newly passing).

Updates #2180

2026-04-01 14:10:42 +01:00

..

matcher

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00

policyutil

policy/v2: implement CapGrant compilation with companion capabilities

2026-04-01 14:10:42 +01:00

v2

policy/v2: implement via route compilation for grants

2026-04-01 14:10:42 +01:00

pm.go

state, policy, noise: implement SSH check period auto-approval

2026-02-25 21:28:05 +01:00

policy_autoapprove_test.go

policy/v2: refactor alias resolution to use ResolvedAddresses

2026-04-01 14:10:42 +01:00

policy_route_approval_test.go

all: apply golangci-lint 2.9.0 fixes

2026-02-19 08:21:23 +01:00

policy_test.go

policy/v2: add localpart:*@domain SSH user compilation

2026-02-28 05:14:11 -08:00

policy.go

all: upgrade to Go 1.26rc2 and modernize codebase

2026-02-08 12:35:23 +01:00

route_approval_test.go

all: upgrade to Go 1.26rc2 and modernize codebase

2026-02-08 12:35:23 +01:00