Add Envoy RBAC xDS integration for dynamic IP blocking
Introduces a blocked_ips table, REST endpoints (GET/POST /blocks,
POST /remove-block), and RBAC network filter injection so NetWatch
auto-blocks propagate to all Envoy listener filter chains in real time.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent e87f03c commit 7521f7bb50dc3a7344377ab26d69e0c5c72da78c
@yangyang xie yangyang xie authored 1 hour ago
Showing 8 changed files
View
internal/api.go
View
internal/api/types.go
View
internal/api_handlers.go
View
internal/app/app.go
View
internal/pkg/snapshot/rbac.go 0 → 100644
View
internal/pkg/snapshot/resource_io.go
View
internal/pkg/storage/sqlite.go
View
internal/pkg/storage/storage.go