mirror of
https://github.com/gravitl/netmaker.git
synced 2025-10-28 11:11:33 +08:00
NET-1910: Acl controls for Egress Traffic (#3377)
* add support for egress ranges on acl policy * add egress ranges to acl rules * add egress ranges to acl policies * Add egress ranges to acl rules * add egress ranges to fw update * fetch acl rules for egress networks * apply egress policies for devices * configure user policies for egresss routes * fix gw tag name migration * fix egress acl rules for static nodes * add egress ranges for static nodes on ingress gw * fileter acl IPs to be unique * cleanup IOT logic from peer update * make acl Rule Dst List * cleanup egress ranges from acl policies * create user group default acl policy for gateways * remove remote access name ids * rm egress ranges removal from acl policies * simplify user permissions on nodes * add additional nameservers to extclient dns * remove debug logs * fix static checks
This commit is contained in:
@@ -866,6 +866,9 @@ func GetTagMapWithNodesByNetwork(netID models.NetworkID, withStaticNodes bool) (
|
||||
nodeI.Mutex.Lock()
|
||||
}
|
||||
for nodeTagID := range nodeI.Tags {
|
||||
if nodeTagID == models.TagID(nodeI.ID.String()) {
|
||||
continue
|
||||
}
|
||||
tagNodesMap[nodeTagID] = append(tagNodesMap[nodeTagID], nodeI)
|
||||
}
|
||||
if nodeI.Mutex != nil {
|
||||
@@ -903,6 +906,9 @@ func AddTagMapWithStaticNodes(netID models.NetworkID,
|
||||
extclient.Mutex.Lock()
|
||||
}
|
||||
for tagID := range extclient.Tags {
|
||||
if tagID == models.TagID(extclient.ClientID) {
|
||||
continue
|
||||
}
|
||||
tagNodesMap[tagID] = append(tagNodesMap[tagID], extclient.ConvertToStaticNode())
|
||||
tagNodesMap["*"] = append(tagNodesMap["*"], extclient.ConvertToStaticNode())
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user