correct sockaddr.is_contained example (#9104)

Syntax for sockaddr.is_contained should be outer, inner - i.e. range, IP. See https://docs.hashicorp.com/sentinel/imports/sockaddr/ for reference.
This commit is contained in:
dddugan 2020-05-29 12:51:31 -05:00 committed by GitHub
parent 60c7e22ddf
commit 7561c04921
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -25,7 +25,7 @@ import "strings"
# We expect logins to come only from our private IP range
cidrcheck = rule {
sockaddr.is_contained(request.connection.remote_addr, "10.20.0.0/16")
sockaddr.is_contained("10.20.0.0/16", request.connection.remote_addr)
}
# Require Ping MFA validation to succeed