mirror of
https://github.com/juanfont/headscale.git
synced 2025-11-10 01:20:58 +01:00
When we fixed the issue of node visibility of nodes that only had access to eachother because of a subnet route, we gave all nodes access to all exit routes by accident. This commit splits exit nodes and subnet routes in the access. If a matcher indicates that the node should have access to any part of the subnet routes, we do not remove it from the node list. If a matcher destination is equal to the internet, and the target node is an exit node, we also do not remove the access. Fixes #2784 Fixes #2788 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com> |
||
|---|---|---|
| .. | ||
| change | ||
| testdata | ||
| api_key.go | ||
| common_test.go | ||
| common.go | ||
| config_test.go | ||
| config.go | ||
| const.go | ||
| node_test.go | ||
| node.go | ||
| policy.go | ||
| preauth_key_test.go | ||
| preauth_key.go | ||
| routes.go | ||
| types_clone.go | ||
| types_view.go | ||
| users_test.go | ||
| users.go | ||
| version.go | ||