2026-03-30 17:08:26 +00:00
|
|
|
// SSH-A1
|
|
|
|
|
//
|
|
|
|
|
// SSH: accept: src=['autogroup:member'] dst=['autogroup:self'] users=['root']
|
|
|
|
|
//
|
|
|
|
|
// Expected: SSH rules on 3 of 5 nodes
|
2026-02-24 19:40:04 +00:00
|
|
|
{
|
|
|
|
|
"test_id": "SSH-A1",
|
|
|
|
|
"policy_file": "ssh_policies/ssh_a1.json",
|
|
|
|
|
"ssh_section": [{ "action": "accept", "src": ["autogroup:member"], "dst": ["autogroup:self"], "users": ["root"] }],
|
|
|
|
|
"nodes": {
|
|
|
|
|
"user1": {
|
|
|
|
|
"rules": [
|
|
|
|
|
{
|
|
|
|
|
"principals": [{ "nodeIP": "100.90.199.68" }, { "nodeIP": "fd7a:115c:a1e0::2d01:c747" }],
|
|
|
|
|
"sshUsers": { "root": "root" },
|
|
|
|
|
"action": {
|
|
|
|
|
"accept": true,
|
|
|
|
|
"allowAgentForwarding": true,
|
|
|
|
|
"allowLocalPortForwarding": true,
|
|
|
|
|
"allowRemotePortForwarding": true
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"user-kris": {
|
|
|
|
|
"rules": [
|
|
|
|
|
{
|
|
|
|
|
"principals": [{ "nodeIP": "100.110.121.96" }, { "nodeIP": "fd7a:115c:a1e0::1737:7960" }],
|
|
|
|
|
"sshUsers": { "root": "root" },
|
|
|
|
|
"action": {
|
|
|
|
|
"accept": true,
|
|
|
|
|
"allowAgentForwarding": true,
|
|
|
|
|
"allowLocalPortForwarding": true,
|
|
|
|
|
"allowRemotePortForwarding": true
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"user-mon": {
|
|
|
|
|
"rules": [
|
|
|
|
|
{
|
|
|
|
|
"principals": [{ "nodeIP": "100.103.90.82" }, { "nodeIP": "fd7a:115c:a1e0::9e37:5a52" }],
|
|
|
|
|
"sshUsers": { "root": "root" },
|
|
|
|
|
"action": {
|
|
|
|
|
"accept": true,
|
|
|
|
|
"allowAgentForwarding": true,
|
|
|
|
|
"allowLocalPortForwarding": true,
|
|
|
|
|
"allowRemotePortForwarding": true
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"tagged-server": { "rules": [] },
|
|
|
|
|
"tagged-prod": { "rules": [] }
|
|
|
|
|
}
|
|
|
|
|
}
|