all lists on lists.proxmox.com
 help / color / mirror / Atom feed
From: David Riley <d.riley@proxmox.com>
To: pve-devel@lists.proxmox.com
Cc: David Riley <d.riley@proxmox.com>
Subject: [PATCH access-control/network 0/2] fix #7520: sdn: clean up dangling ACLs on resource deletion
Date: Tue,  5 May 2026 16:22:05 +0200	[thread overview]
Message-ID: <20260505142207.2563052-1-d.riley@proxmox.com> (raw)

Add pruning mechanism to clean up orphaned SDN ACL entries by
comparing the current `running-config` with the newly compiled state
during `commit_config`.

This ensures state consistency for manual applies via the UI/API
as well as during the automatic configuration reload on system boot.
Covers resources tracked in the `running-config`:
* Zones
* VNets
* Fabrics
* Controllers

Does not cover IPAMs and DNS as these are not staged.


pve-network:

David Riley (1):
  fix #7520: sdn: clean up dangling ACLs on resource deletion

 src/PVE/Network/SDN.pm | 45 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 45 insertions(+)


pve-access-control:

David Riley (1):
  fix #7520: access-control: add SDN ACL cleanup helper

 src/PVE/AccessControl.pm | 40 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 40 insertions(+)


Summary over all repositories:
  2 files changed, 85 insertions(+), 0 deletions(-)

-- 
Generated by murpp 0.11.0




             reply	other threads:[~2026-05-05 14:23 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-05-05 14:22 David Riley [this message]
2026-05-05 14:22 ` [PATCH pve-network 1/2] fix #7520: sdn: clean up dangling ACLs on resource deletion David Riley
2026-05-05 14:22 ` [PATCH pve-access-control 2/2] fix #7520: access-control: add SDN ACL cleanup helper David Riley
2026-05-07 13:03 ` [PATCH access-control/network 0/2] fix #7520: sdn: clean up dangling ACLs on resource deletion Stefan Hanreich

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20260505142207.2563052-1-d.riley@proxmox.com \
    --to=d.riley@proxmox.com \
    --cc=pve-devel@lists.proxmox.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.
Service provided by Proxmox Server Solutions GmbH | Privacy | Legal