2026-03-30 17:08:26 +00:00
|
|
|
// SSH-B6
|
|
|
|
|
//
|
|
|
|
|
// SSH: accept: src=['autogroup:tagged'] dst=['tag:server'] users=['root']
|
|
|
|
|
//
|
|
|
|
|
// Expected: SSH rules on 1 of 5 nodes
|
2026-02-24 19:40:04 +00:00
|
|
|
{
|
|
|
|
|
"test_id": "SSH-B6",
|
|
|
|
|
"policy_file": "ssh_policies/ssh_b6.json",
|
|
|
|
|
"ssh_section": [{ "action": "accept", "src": ["autogroup:tagged"], "dst": ["tag:server"], "users": ["root"] }],
|
|
|
|
|
"nodes": {
|
|
|
|
|
"user1": { "rules": [] },
|
|
|
|
|
"user-kris": { "rules": [] },
|
|
|
|
|
"user-mon": { "rules": [] },
|
|
|
|
|
"tagged-server": {
|
|
|
|
|
"rules": [
|
|
|
|
|
{
|
|
|
|
|
"principals": [
|
|
|
|
|
{ "nodeIP": "100.103.8.15" },
|
|
|
|
|
{ "nodeIP": "100.108.74.26" },
|
|
|
|
|
{ "nodeIP": "fd7a:115c:a1e0::5b37:80f" },
|
|
|
|
|
{ "nodeIP": "fd7a:115c:a1e0::b901:4a87" }
|
|
|
|
|
],
|
|
|
|
|
"sshUsers": { "root": "root" },
|
|
|
|
|
"action": {
|
|
|
|
|
"accept": true,
|
|
|
|
|
"allowAgentForwarding": true,
|
|
|
|
|
"allowLocalPortForwarding": true,
|
|
|
|
|
"allowRemotePortForwarding": true
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"tagged-prod": { "rules": [] }
|
|
|
|
|
}
|
|
|
|
|
}
|