Feat rego default policy (#700)

Converts rules to Rego policies and allow users to write raw policies to set up connectivity and firewall on the clients.

management/server/policy_test.go

@@ -0,0 +1,67 @@
+package server
+
+import (
+	"net"
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+)
+
+func TestAccount_getPeersByPolicy(t *testing.T) {
+	account := &Account{
+		Peers: map[string]*Peer{
+			"peer1": {
+				ID: "peer1",
+				IP: net.IPv4(10, 20, 0, 1),
+			},
+			"peer2": {
+				ID: "peer2",
+				IP: net.IPv4(10, 20, 0, 2),
+			},
+			"peer3": {
+				ID: "peer3",
+				IP: net.IPv4(10, 20, 0, 3),
+			},
+		},
+		Groups: map[string]*Group{
+			"gid1": {
+				ID:    "gid1",
+				Name:  "all",
+				Peers: []string{"peer1", "peer2", "peer3"},
+			},
+		},
+		Rules: map[string]*Rule{
+			"default": {
+				ID:          "default",
+				Name:        "default",
+				Description: "default",
+				Disabled:    false,
+				Source:      []string{"gid1"},
+				Destination: []string{"gid1"},
+			},
+		},
+	}
+
+	rule, err := RuleToPolicy(account.Rules["default"])
+	assert.NoError(t, err)
+
+	account.Policies = append(account.Policies, rule)
+
+	peers, firewallRules := account.getPeersByPolicy("peer1")
+	assert.Len(t, peers, 2)
+	assert.Contains(t, peers, account.Peers["peer2"])
+	assert.Contains(t, peers, account.Peers["peer3"])
+
+	epectedFirewallRules := []*FirewallRule{
+		{PeerID: "peer1", PeerIP: "10.20.0.1", Direction: "dst", Action: "accept", Port: ""},
+		{PeerID: "peer2", PeerIP: "10.20.0.2", Direction: "dst", Action: "accept", Port: ""},
+		{PeerID: "peer3", PeerIP: "10.20.0.3", Direction: "dst", Action: "accept", Port: ""},
+		{PeerID: "peer1", PeerIP: "10.20.0.1", Direction: "src", Action: "accept", Port: ""},
+		{PeerID: "peer2", PeerIP: "10.20.0.2", Direction: "src", Action: "accept", Port: ""},
+		{PeerID: "peer3", PeerIP: "10.20.0.3", Direction: "src", Action: "accept", Port: ""},
+	}
+	assert.Len(t, firewallRules, len(epectedFirewallRules))
+	for i := range firewallRules {
+		assert.Equal(t, firewallRules[i], epectedFirewallRules[i])
+	}
+}