From feb8e90ae1a0235e4891e2f58be252fb981f892b Mon Sep 17 00:00:00 2001 From: bcmmbaga Date: Fri, 27 Dec 2024 23:28:34 +0300 Subject: [PATCH] Evaluate all applied posture checks on source peers only Signed-off-by: bcmmbaga --- management/server/types/account.go | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/management/server/types/account.go b/management/server/types/account.go index f38e80deb..2accae6c8 100644 --- a/management/server/types/account.go +++ b/management/server/types/account.go @@ -1319,15 +1319,16 @@ func (a *Account) GetNetworkResourcesRoutesToSync(ctx context.Context, peerID st } } - var peerPostureChecks []string - for _, policy := range resourcePolicies[resource.ID] { - peerPostureChecks = append(peerPostureChecks, policy.SourcePostureChecks...) - } + if !addSourcePeers { + var peerPostureChecks []string + for _, policy := range resourcePolicies[resource.ID] { + peerPostureChecks = append(peerPostureChecks, policy.SourcePostureChecks...) + } - // validate the peer based on policy posture checks applied - isValid := a.validatePostureChecksOnPeer(ctx, peerPostureChecks, peerID) - if !isValid { - continue + isValid := a.validatePostureChecksOnPeer(ctx, peerPostureChecks, peerID) + if !isValid { + continue + } } for _, policy := range resourcePolicies[resource.ID] {