mirror of
https://github.com/netbirdio/netbird.git
synced 2026-07-28 00:42:37 -04:00
afb34f3139
StartProxy now accepts env overrides so a test can set a short NB_PROXY_TUNNEL_CACHE_TTL and observe authorization changes propagate in seconds instead of the 5-minute default. Add TestGuardrailGroupSwitchTakesEffectAfterTTL: a client starts in group A (allowed modelA) with a second policy granting group B modelB. After moving the peer A -> B via the API, once the short tunnel-cache TTL expires the proxy re-validates, the guardrail decision flips (modelB served, modelA denied), and the cross-group deny is enforced by management's per-policy/group check.