The IP User filter says that it requires at least one group to be configured.
The schema seems to confirm this intention, but in practice, this does not seem to be enforced. Andrew (Valkyrie) wanted to be able to configure no groups, and he was able to successfully do so.
Of note, the IP User filter docs have not been migrated yet: http://www.openrepose.org/versions/126.96.36.199/filters/ip-user.html
The file path is wrong:
- IP User docs are migrated to the versioned docs.
- Unit tests for IP User schema are updated to use the new ConfigValidator.
- The schema is tested in a functional test.
- The release notes include a comment that anyone depending on this bug will be broken.