5 Commits

Include renames

Author	SHA1	Message	Date
nessi	d651a11472	feat: add automatic policy rule cleanup when disabling or switching to audit mode with provider-level rule deletion ... Add cluster_provider_targets helper to build target list from all cluster workloads, implement cleanup_policy_provider_rules to delete policy rules across all clusters with per-cluster result tracking, add delete_policy_rules method to ProxmoxProvider that removes rules matching policy ID marker with error collection, extend policy_id_marker and rule_comment_matches_marker helpers for	2026-07-09 21:31:20 +02:00
nessi	da60155710	feat: add firewall enforcement status checking to policy apply with datacenter/node/guest/interface validation and warning collection ... Add cluster_firewall_options_url and node_firewall_options_url helpers to build firewall options endpoint paths, implement config_interface_status to parse network interface firewall flags from VM/LXC config with bridge/firewall/raw fields, add firewall_enforcement_status to check enable status across datacenter/node/guest levels and validate interface firewall flags with warning collection for disabled settings, extend apply_rules response with enforcement_	2026-07-09 21:16:13 +02:00
nessi	1b81847fc6	feat: add automatic guest network interface firewall enablement during policy apply operations ... Add network_firewall_enabled_value helper to parse and inject firewall=1 into Proxmox network interface config strings, implement enable_guest_firewall_interfaces to update VM/LXC config with firewall=1 on all netX interfaces before writing rules, extend workload_config_url to build config endpoint paths for qemu/lxc guests, add interfaces_enabled field to apply_rules response showing which interfaces were	2026-07-09 19:40:31 +02:00
nessi	baa0d24eb4	feat: add network: endpoint resolver, VM.Config.Options privilege requirement, top talkers dashboard widget, and automatic guest firewall enablement ... Add network: prefix support in endpoint_values to resolve network names to IPAM subnet CIDRs for policy matching, extend workload_provider_target to accept vmid: prefix and bare workload names as fallback resolution methods, implement dashboard_top_talkers to aggregate traffic flows by workload with interface_traffic fallback when flows unavailable, add	2026-07-09 15:36:42 +02:00
nessi	1ada59d3c7	docs: document Proxmox write permissions and firewall apply scope, add live apply implementation with rule resolution and provider integration ... Add minimum write privileges section covering VM.Audit and VM.Config.Network requirements for firewall orchestration, document NexaFabric comment marker approach for safe rule replacement, clarify that only VM/LXC-level rules with concrete workload targets are supported for live apply while security groups remain preview-only, add firewall interface checkbox requirement for enforcement, document	2026-07-09 13:43:08 +02:00