Skip to content

Commit 20bca44

Browse files
committed
Update Tailscale policy to allow broader access for relay applications
- Modified the Tailscale policy to permit traffic from all sources to the 'udm' tag for relay applications, while maintaining existing rules for the superuser group.
1 parent e59048e commit 20bca44

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

tailscale/policy.hujson

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,14 @@
7474
"ip": ["*"],
7575
},
7676
{
77-
"src": ["group:superuser", "tag:udm", "tag:k8s", "tag:k8s-operator"],
77+
"src": ["*"],
78+
"dst": ["tag:udm"],
79+
"app": {
80+
"tailscale.com/cap/relay": [],
81+
},
82+
},
83+
{
84+
"src": ["group:superuser"],
7885
"dst": ["tag:udm"],
7986
"ip": ["*"],
8087
"app": {

0 commit comments

Comments
 (0)