Evaluate all applied posture checks once

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
netbirdio · Dec 27, 2024 · 076d6d8 · 076d6d8
1 parent c8c2522
commit 076d6d8
Showing 1 changed file with 10 additions and 5 deletions.
diff --git a/management/server/types/account.go b/management/server/types/account.go
@@ -1319,13 +1319,18 @@ func (a *Account) GetNetworkResourcesRoutesToSync(ctx context.Context, peerID st
 			}
 		}
 
+		var peerPostureChecks []string
 		for _, policy := range resourcePolicies[resource.ID] {
-			// validate the peer based on policy posture checks applied
-			isValid := a.validatePostureChecksOnPeer(ctx, policy.SourcePostureChecks, peerID)
-			if !isValid {
-				continue
-			}
+			peerPostureChecks = append(peerPostureChecks, policy.SourcePostureChecks...)
+		}
 
+		// validate the peer based on policy posture checks applied
+		isValid := a.validatePostureChecksOnPeer(ctx, peerPostureChecks, peerID)
+		if !isValid {
+			continue
+		}
+
+		for _, policy := range resourcePolicies[resource.ID] {
 			for _, sourceGroup := range policy.SourceGroups() {
 				group := a.GetGroup(sourceGroup)
 				if group == nil {