// ACL-MR23
//
// ACLs:
//   accept: src=['tag:server'] dst=['tag:server:22']
//   accept: src=['tag:client'] dst=['tag:client:22']
//   accept: src=['tag:prod'] dst=['tag:prod:22']
//   ... (6 rules total)
//
// Expected: Rules on 8 of 8 nodes
{
  "test_id": "ACL-MR23",
  "input": {
    "full_policy": {
      "groups": {
        "group:admins": [
          "kratail2tid@passkey"
        ],
        "group:developers": [
          "kristoffer@dalby.cc",
          "kratail2tid@passkey"
        ],
        "group:monitors": [
          "monitorpasskeykradalby@passkey"
        ],
        "group:empty": []
      },
      "tagOwners": {
        "tag:server": [
          "kratail2tid@passkey"
        ],
        "tag:prod": [
          "kratail2tid@passkey"
        ],
        "tag:client": [
          "kratail2tid@passkey"
        ],
        "tag:router": [
          "kratail2tid@passkey"
        ],
        "tag:exit": [
          "kratail2tid@passkey"
        ]
      },
      "hosts": {
        "webserver": "100.108.74.26",
        "prodbox": "100.103.8.15",
        "internal": "10.0.0.0/8",
        "subnet24": "192.168.1.0/24"
      },
      "autoApprovers": {
        "routes": {
          "10.33.0.0/16": [
            "tag:router"
          ],
          "0.0.0.0/0": [
            "tag:exit"
          ],
          "::/0": [
            "tag:exit"
          ]
        }
      },
      "acls": [
        {
          "action": "accept",
          "src": [
            "tag:server"
          ],
          "dst": [
            "tag:server:22"
          ]
        },
        {
          "action": "accept",
          "src": [
            "tag:client"
          ],
          "dst": [
            "tag:client:22"
          ]
        },
        {
          "action": "accept",
          "src": [
            "tag:prod"
          ],
          "dst": [
            "tag:prod:22"
          ]
        },
        {
          "action": "accept",
          "src": [
            "tag:router"
          ],
          "dst": [
            "tag:router:22"
          ]
        },
        {
          "action": "accept",
          "src": [
            "autogroup:member"
          ],
          "dst": [
            "*:80"
          ]
        },
        {
          "action": "accept",
          "src": [
            "*"
          ],
          "dst": [
            "autogroup:member:443"
          ]
        }
      ]
    }
  },
  "captures": {
    "exit-node": {
      "packet_filter_rules": [
        {
          "SrcIPs": [
            "100.103.90.82",
            "100.110.121.96",
            "100.90.199.68",
            "fd7a:115c:a1e0::1737:7960",
            "fd7a:115c:a1e0::2d01:c747",
            "fd7a:115c:a1e0::9e37:5a52"
          ],
          "DstPorts": [
            {
              "IP": "*",
              "Ports": {
                "First": 80,
                "Last": 80
              }
            }
          ]
        }
      ]
    },
    "subnet-router": {
      "packet_filter_rules": [
        {
          "SrcIPs": [
            "100.92.142.61",
            "fd7a:115c:a1e0::3e37:8e3d"
          ],
          "DstPorts": [
            {
              "IP": "100.92.142.61",
              "Ports": {
                "First": 22,
                "Last": 22
              }
            },
            {
              "IP": "fd7a:115c:a1e0::3e37:8e3d",
              "Ports": {
                "First": 22,
                "Last": 22
              }
            }
          ]
        },
        {
          "SrcIPs": [
            "100.103.90.82",
            "100.110.121.96",
            "100.90.199.68",
            "fd7a:115c:a1e0::1737:7960",
            "fd7a:115c:a1e0::2d01:c747",
            "fd7a:115c:a1e0::9e37:5a52"
          ],
          "DstPorts": [
            {
              "IP": "*",
              "Ports": {
                "First": 80,
                "Last": 80
              }
            }
          ]
        }
      ]
    },
    "tagged-client": {
      "packet_filter_rules": [
        {
          "SrcIPs": [
            "100.83.200.69",
            "fd7a:115c:a1e0::c537:c845"
          ],
          "DstPorts": [
            {
              "IP": "100.83.200.69",
              "Ports": {
                "First": 22,
                "Last": 22
              }
            },
            {
              "IP": "fd7a:115c:a1e0::c537:c845",
              "Ports": {
                "First": 22,
                "Last": 22
              }
            }
          ]
        },
        {
          "SrcIPs": [
            "100.103.90.82",
            "100.110.121.96",
            "100.90.199.68",
            "fd7a:115c:a1e0::1737:7960",
            "fd7a:115c:a1e0::2d01:c747",
            "fd7a:115c:a1e0::9e37:5a52"
          ],
          "DstPorts": [
            {
              "IP": "*",
              "Ports": {
                "First": 80,
                "Last": 80
              }
            }
          ]
        }
      ]
    },
    "tagged-prod": {
      "packet_filter_rules": [
        {
          "SrcIPs": [
            "100.103.8.15",
            "fd7a:115c:a1e0::5b37:80f"
          ],
          "DstPorts": [
            {
              "IP": "100.103.8.15",
              "Ports": {
                "First": 22,
                "Last": 22
              }
            },
            {
              "IP": "fd7a:115c:a1e0::5b37:80f",
              "Ports": {
                "First": 22,
                "Last": 22
              }
            }
          ]
        },
        {
          "SrcIPs": [
            "100.103.90.82",
            "100.110.121.96",
            "100.90.199.68",
            "fd7a:115c:a1e0::1737:7960",
            "fd7a:115c:a1e0::2d01:c747",
            "fd7a:115c:a1e0::9e37:5a52"
          ],
          "DstPorts": [
            {
              "IP": "*",
              "Ports": {
                "First": 80,
                "Last": 80
              }
            }
          ]
        }
      ]
    },
    "tagged-server": {
      "packet_filter_rules": [
        {
          "SrcIPs": [
            "100.108.74.26",
            "fd7a:115c:a1e0::b901:4a87"
          ],
          "DstPorts": [
            {
              "IP": "100.108.74.26",
              "Ports": {
                "First": 22,
                "Last": 22
              }
            },
            {
              "IP": "fd7a:115c:a1e0::b901:4a87",
              "Ports": {
                "First": 22,
                "Last": 22
              }
            }
          ]
        },
        {
          "SrcIPs": [
            "100.103.90.82",
            "100.110.121.96",
            "100.90.199.68",
            "fd7a:115c:a1e0::1737:7960",
            "fd7a:115c:a1e0::2d01:c747",
            "fd7a:115c:a1e0::9e37:5a52"
          ],
          "DstPorts": [
            {
              "IP": "*",
              "Ports": {
                "First": 80,
                "Last": 80
              }
            }
          ]
        }
      ]
    },
    "user-kris": {
      "packet_filter_rules": [
        {
          "SrcIPs": [
            "100.103.90.82",
            "100.110.121.96",
            "100.90.199.68",
            "fd7a:115c:a1e0::1737:7960",
            "fd7a:115c:a1e0::2d01:c747",
            "fd7a:115c:a1e0::9e37:5a52"
          ],
          "DstPorts": [
            {
              "IP": "*",
              "Ports": {
                "First": 80,
                "Last": 80
              }
            }
          ]
        },
        {
          "SrcIPs": [
            "10.33.0.0/16",
            "100.115.94.0-100.127.255.255",
            "100.64.0.0-100.115.91.255",
            "fd7a:115c:a1e0::/48"
          ],
          "DstPorts": [
            {
              "IP": "100.110.121.96",
              "Ports": {
                "First": 443,
                "Last": 443
              }
            },
            {
              "IP": "fd7a:115c:a1e0::1737:7960",
              "Ports": {
                "First": 443,
                "Last": 443
              }
            }
          ]
        }
      ]
    },
    "user-mon": {
      "packet_filter_rules": [
        {
          "SrcIPs": [
            "100.103.90.82",
            "100.110.121.96",
            "100.90.199.68",
            "fd7a:115c:a1e0::1737:7960",
            "fd7a:115c:a1e0::2d01:c747",
            "fd7a:115c:a1e0::9e37:5a52"
          ],
          "DstPorts": [
            {
              "IP": "*",
              "Ports": {
                "First": 80,
                "Last": 80
              }
            }
          ]
        },
        {
          "SrcIPs": [
            "10.33.0.0/16",
            "100.115.94.0-100.127.255.255",
            "100.64.0.0-100.115.91.255",
            "fd7a:115c:a1e0::/48"
          ],
          "DstPorts": [
            {
              "IP": "100.103.90.82",
              "Ports": {
                "First": 443,
                "Last": 443
              }
            },
            {
              "IP": "fd7a:115c:a1e0::9e37:5a52",
              "Ports": {
                "First": 443,
                "Last": 443
              }
            }
          ]
        }
      ]
    },
    "user1": {
      "packet_filter_rules": [
        {
          "SrcIPs": [
            "100.103.90.82",
            "100.110.121.96",
            "100.90.199.68",
            "fd7a:115c:a1e0::1737:7960",
            "fd7a:115c:a1e0::2d01:c747",
            "fd7a:115c:a1e0::9e37:5a52"
          ],
          "DstPorts": [
            {
              "IP": "*",
              "Ports": {
                "First": 80,
                "Last": 80
              }
            }
          ]
        },
        {
          "SrcIPs": [
            "10.33.0.0/16",
            "100.115.94.0-100.127.255.255",
            "100.64.0.0-100.115.91.255",
            "fd7a:115c:a1e0::/48"
          ],
          "DstPorts": [
            {
              "IP": "100.90.199.68",
              "Ports": {
                "First": 443,
                "Last": 443
              }
            },
            {
              "IP": "fd7a:115c:a1e0::2d01:c747",
              "Ports": {
                "First": 443,
                "Last": 443
              }
            }
          ]
        }
      ]
    }
  }
}