Kristoffer Dalby 4f040dead2 policy/v2: implement grant validation rules matching Tailscale SaaS ... Implement comprehensive grant validation including: accept empty sources/destinations (they produce no rules), validate grant ip/app field requirements, capability name format, autogroup constraints, via tag existence, and default route CIDR restrictions. Updates #2180		2026-04-01 14:10:42 +01:00
..
testdata	policy/v2: add advertised routes to compat test topologies	2026-04-01 14:10:42 +01:00
filter.go	policy/v2: implement grant validation rules matching Tailscale SaaS	2026-04-01 14:10:42 +01:00
filter_test.go	policy/v2: use bare IPs in autogroup:self DstPorts	2026-04-01 14:10:42 +01:00
main_test.go	all: fix test flakiness and improve test infrastructure	2026-03-14 02:52:28 -07:00
policy.go	policy/v2: refactor alias resolution to use ResolvedAddresses	2026-04-01 14:10:42 +01:00
policy_test.go	all: upgrade to Go 1.26rc2 and modernize codebase	2026-02-08 12:35:23 +01:00
tailscale_acl_data_compat_test.go	policy/v2: implement CapGrant compilation with companion capabilities	2026-04-01 14:10:42 +01:00
tailscale_grants_compat_test.go	policy/v2: implement grant validation rules matching Tailscale SaaS	2026-04-01 14:10:42 +01:00
tailscale_routes_data_compat_test.go	policy/v2: convert routes compat tests to data-driven format with Tailscale SaaS captures	2026-04-01 14:10:42 +01:00
tailscale_ssh_data_compat_test.go	policy/v2: add SSH compatibility testdata from Tailscale SaaS	2026-02-28 05:14:11 -08:00
types.go	policy/v2: implement grant validation rules matching Tailscale SaaS	2026-04-01 14:10:42 +01:00
types_test.go	policy/v2: implement grant validation rules matching Tailscale SaaS	2026-04-01 14:10:42 +01:00
utils.go	policy/v2: exclude exit routes from ReduceFilterRules	2026-04-01 14:10:42 +01:00
utils_test.go	policy/v2: exclude exit routes from ReduceFilterRules	2026-04-01 14:10:42 +01:00