Re: [PATCH access-control/network 0/2] fix #7520: sdn: clean up dangling ACLs on resource deletion

[Stefan Hanreich <s.hanreich@proxmox.com>]

Thanks for the series!

Would it be possible to send a v2 that also includes route-maps and
prefix-lists?

On 5/5/26 4:21 PM, David Riley wrote:
> Add pruning mechanism to clean up orphaned SDN ACL entries by
> comparing the current `running-config` with the newly compiled state
> during `commit_config`.
> 
> This ensures state consistency for manual applies via the UI/API
> as well as during the automatic configuration reload on system boot.
> Covers resources tracked in the `running-config`:
> * Zones
> * VNets
> * Fabrics
> * Controllers
> 
> Does not cover IPAMs and DNS as these are not staged.
> 
> 
> pve-network:
> 
> David Riley (1):
>   fix #7520: sdn: clean up dangling ACLs on resource deletion
> 
>  src/PVE/Network/SDN.pm | 45 ++++++++++++++++++++++++++++++++++++++++++
>  1 file changed, 45 insertions(+)
> 
> 
> pve-access-control:
> 
> David Riley (1):
>   fix #7520: access-control: add SDN ACL cleanup helper
> 
>  src/PVE/AccessControl.pm | 40 ++++++++++++++++++++++++++++++++++++++++
>  1 file changed, 40 insertions(+)
> 
> 
> Summary over all repositories:
>   2 files changed, 85 insertions(+), 0 deletions(-)
>