 Drew Newberry
|
83003e80fc
|
feat(interceptors): initial gateway interceptor implementation and reference example (#2005)
* feat(gateway): add descriptor-driven interceptors
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* feat(gateway): add service-reflected interceptors
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* wip
* fix(gateway): harden interceptor evaluation
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* feat(interceptors): label metrics and harden governance smoke
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* remove on_error: ignore
* feat(gateway-interceptors): emit log annotations
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* feat(examples): govern provider profiles in interceptor
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(gateway): preserve update config annotations
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* feat(providers): support interceptor profile catalogs
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* wip
* feat(governance-interceptor): sign provider profiles
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(providers): use configured profile sources for refresh updates
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* feat(gateway-interceptors): add phase-specific evaluation payloads
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* feat(providers): compose provider profile sources
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(gateway-interceptors): preserve committed responses
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(gateway-interceptors): reject ambiguous protobuf oneofs
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(gateway-interceptors): validate patch candidates per binding
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* refactor(gateway-interceptors): use reflected protobuf codec
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(governance-example): canonicalize signed protobuf hashes
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(gateway): commit policy provenance atomically
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(gateway): close signed governance bypasses
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(gateway): isolate interceptor secrets and authority
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(gateway): snapshot provider profiles per request
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* chore(gateway): resolve server clippy warnings
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(server): satisfy provider source clippy lint
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(server): initialize policy test annotations
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(gateway-interceptors): require explicit route allowlist
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* docs(proto): clarify update annotation semantics
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
---------
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-07-14 20:58:36 -07:00 |
|