mirror of
https://github.com/hashicorp/vault.git
synced 2026-05-05 04:16:31 +02:00
correct sockaddr.is_contained example (#9104)
Syntax for sockaddr.is_contained should be outer, inner - i.e. range, IP. See https://docs.hashicorp.com/sentinel/imports/sockaddr/ for reference.
This commit is contained in:
parent
60c7e22ddf
commit
7561c04921
@ -25,7 +25,7 @@ import "strings"
|
||||
|
||||
# We expect logins to come only from our private IP range
|
||||
cidrcheck = rule {
|
||||
sockaddr.is_contained(request.connection.remote_addr, "10.20.0.0/16")
|
||||
sockaddr.is_contained("10.20.0.0/16", request.connection.remote_addr)
|
||||
}
|
||||
|
||||
# Require Ping MFA validation to succeed
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user