mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-23 06:30:28 +08:00
Varsha
1cb9ef8ab4
* refactor(crypto): centralize AWS-LC behind backend interface Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * refactor(crypto): route new host proxy tests through facade Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * fix(crypto): make backend boundary check portable Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * fix(crypto): route Google JWT signing through facade and verify context dispatch Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * refactor(crypto): propagate digest backend failures Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * refactor(crypto): route Vault TLS fixtures through facade Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * refactor(crypto): adapt isolation runtime callers after main rebase Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * fix(crypto): declare sandbox dependency and remove boundary lint Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * refactor(crypto): support independent backends and backend-free CA import Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * chore(crypto): refresh feature suite lockfile after rebase Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * fix(crypto): route runtime integrity and entropy through backend Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * chore(crypto): refresh lockfile after upstream rebase Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * fix(crypto): route VM socket entropy through backend after rebase Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * docs(crypto): document architecture and contributor boundaries Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * test(crypto): adapt upstream fixtures to backend facade Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * test(crypto): route relay TLS fixture through facade Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * test(crypto): adapt service bearer TLS fixture after rebase Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * fix(crypto): route provider profile TLS initialization through facade Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * fix(crypto): adapt upstream VM and supervisor paths to facade Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * ci(crypto): enforce backend independence in branch checks Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * test(crypto): adapt upstream token grant TLS fixture Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * fix(crypto): avoid format collect in executable hashing Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * fix(crypto): address provider selection and decryption review Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * fix(crypto): adapt upstream operator TLS paths after rebase Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> * fix(crypto): adapt upstream TLS fixtures and protocol tests Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com> --------- Signed-off-by: Varsha Prasad Narsing <varshaprasad96@gmail.com>
92 lines
3.3 KiB
TOML
92 lines
3.3 KiB
TOML
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
[package]
|
|
name = "openshell-supervisor-network"
|
|
description = "Network component of the OpenShell supervisor: proxy, L7 enforcement, OPA, and denial aggregation"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
repository.workspace = true
|
|
rust-version.workspace = true
|
|
|
|
[dependencies]
|
|
openshell-sandbox-backend = { path = "../openshell-sandbox-backend" }
|
|
sha2 = { workspace = true }
|
|
openshell-binary-identity = { path = "../openshell-binary-identity" }
|
|
openshell-crypto = { workspace = true }
|
|
openshell-core = { path = "../openshell-core", features = ["oauth"] }
|
|
openshell-isolation-interface = { path = "../openshell-isolation-interface" }
|
|
openshell-ocsf = { path = "../openshell-ocsf" }
|
|
openshell-policy = { path = "../openshell-policy" }
|
|
openshell-policy-schema = { path = "../openshell-policy-schema" }
|
|
openshell-supervisor-middleware = { path = "../openshell-supervisor-middleware" }
|
|
|
|
async-trait = "0.1"
|
|
|
|
apollo-parser = { workspace = true }
|
|
aws-sigv4 = { version = "1", features = ["sign-http", "http1"] }
|
|
aws-credential-types = { version = "1", features = ["hardcoded-credentials"] }
|
|
aws-smithy-runtime-api = { version = "1", features = ["client"] }
|
|
http = { workspace = true }
|
|
base64 = { workspace = true }
|
|
bytes = { workspace = true }
|
|
flate2 = "1"
|
|
futures = { workspace = true }
|
|
glob = { workspace = true }
|
|
hex = "0.4"
|
|
hickory-proto = "0.26.1"
|
|
ipnet = "2"
|
|
miette = { workspace = true }
|
|
prost-types = { workspace = true }
|
|
rcgen = { workspace = true }
|
|
regorus = { version = "0.9", default-features = false, features = ["std", "arc", "glob", "yaml"] }
|
|
reqwest = { workspace = true }
|
|
rustls = { workspace = true }
|
|
rustls-native-certs = { workspace = true }
|
|
rustls-pemfile = { workspace = true }
|
|
serde = { workspace = true }
|
|
serde_json = { workspace = true }
|
|
serde_yml = { workspace = true }
|
|
sha1 = "0.10"
|
|
spiffe = { workspace = true }
|
|
tempfile = "3"
|
|
thiserror = { workspace = true }
|
|
tokio = { workspace = true }
|
|
tokio-rustls = { workspace = true }
|
|
tonic = { workspace = true }
|
|
tower-mcp-types = { workspace = true }
|
|
tracing = { workspace = true }
|
|
uuid = { workspace = true }
|
|
webpki-roots = { workspace = true, optional = true }
|
|
|
|
[features]
|
|
default = ["bundled-ca-roots"]
|
|
bundled-ca-roots = ["dep:webpki-roots"]
|
|
|
|
[dev-dependencies]
|
|
openshell-sandbox-backend = { path = "../openshell-sandbox-backend", features = ["test-support"] }
|
|
|
|
openshell-driver-vm = { path = "../openshell-driver-vm", default-features = false, features = ["allocation-tracking"] }
|
|
openshell-ocsf = { path = "../openshell-ocsf", features = ["test-support"] }
|
|
openshell-otel = { path = "../openshell-otel" }
|
|
openshell-supervisor-middleware-builtins = { path = "../openshell-supervisor-middleware-builtins" }
|
|
opentelemetry_sdk = { workspace = true, features = ["testing"] }
|
|
temp-env = "0.3"
|
|
tokio = { workspace = true, features = ["test-util"] }
|
|
tokio-tungstenite = { workspace = true }
|
|
tracing-subscriber = { workspace = true }
|
|
tokio-stream = { workspace = true, features = ["net"] }
|
|
|
|
[target.'cfg(unix)'.dependencies]
|
|
libc = "0.2"
|
|
|
|
[target.'cfg(target_os = "linux")'.dependencies]
|
|
nix = { workspace = true, features = ["socket", "net"] }
|
|
|
|
[target.'cfg(unix)'.dev-dependencies]
|
|
rustix = { workspace = true }
|
|
|
|
[lints]
|
|
workspace = true
|