Misha Bragin 2afa69b622 [management] prevent dangling group refs in agent-network ACLs. (#7060) ...

Block deleting a group referenced as a source group by an agent network
   policy, and drop unresolvable groups from synthesised private-service
ACLs. A deleted group survived in agent_network_policies.source_groups
   and was carried into the injected in-memory policy, where network-map
   assembly resolved it to a nil group and panicked on every proxy peer
   sync.

2026-08-04 18:04:22 +02:00

34 KiB

Raw Blame History

View Raw