For LDAP exports of hosts with multiple policies, mark them to be isolated.

[terjekv]

There is currently no support for this in our network backend.

[pederhan]

The current proposed format uses _isolated as a suffix to a given policy:

mreg-tools/hosts-ldif/hosts-ldif.py

Lines 333 to 355 in e54d7ce

	policies = get_host_policies(i, net2policy)
	if policies:
	host_net_policy: str | None = None
	# Determine the community/policy name to use in the export
	communities = get_host_communities(i, id2ip)
	if communities:
	# Host is part of a community. Add the first community found
	# NOTE: use only first community per host (FOR NOW!)
	# TODO: log if multiple communities per host?
	com = next(iter(communities))
	host_net_policy = com.community_global or com.community
	elif pol := policies.get_isolated_policy():
	# Host is not part of a community, and its policy includes the isolated attribute
	# and it has a community template pattern
	if pol.policy.community_template_pattern:
	host_net_policy = f"{pol.policy.community_template_pattern}_isolated"
	else:
	logger.warning(
	"No community template pattern for isolated policy %s on host %s",
	pol.policy.name,
	i["name"],
	)

Specifically:

mreg-tools/hosts-ldif/hosts-ldif.py

Line 349 in e54d7ce

host_net_policy = f"{pol.policy.community_template_pattern}_isolated"

We could do what I proposed here: #17