alangou 0d708d6d51 fix(policy): gate uninspected credentialed endpoints (#2493) ...

* fix(policy): gate uninspected credentialed endpoints

Signed-off-by: Adrien Langou <alangou@nvidia.com>

* refactor(cli): extract allowed-ip option parsing

Signed-off-by: Adrien Langou <alangou@nvidia.com>

* fix(policy): gate endpointless credential bindings

Signed-off-by: Adrien Langou <alangou@nvidia.com>

---------

Signed-off-by: Adrien Langou <alangou@nvidia.com>

2026-08-19 15:18:02 +00:00

..

gpu

test(e2e): run gpu workloads from manifest (#1709)

2026-06-30 09:54:12 +02:00

bypass_detection.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

cf_auth_smoke.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

cli_smoke.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

community_image.rs

refactor(cli): remove gateway lifecycle management (#1221)

2026-05-07 09:54:13 -07:00

core_dump_hardening.rs

fix(sandbox): disable child core dumps (#821)

2026-04-14 22:28:18 -07:00

credential_drivers.rs

feat(credentials): add provider credential storage drivers (#2437)

2026-08-05 16:29:41 +00:00

credential_gating.rs

fix(policy): gate uninspected credentialed endpoints (#2493)

2026-08-19 15:18:02 +00:00

custom_image.rs

feat(sandbox): honor OCI image working directories (#2530)

2026-08-04 17:38:51 +00:00

docker_preflight.rs

refactor(cli): remove gateway lifecycle management (#1221)

2026-05-07 09:54:13 -07:00

driver_config_volume.rs

feat(sandbox): honor OCI image working directories (#2530)

2026-08-04 17:38:51 +00:00

edge_tunnel_e2e.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

forward_proxy_graphql_l7.rs

test(e2e): retry transient forward proxy stale policy responses (#1929)

2026-06-16 17:11:58 -07:00

forward_proxy_jsonrpc_l7.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

forward_proxy_l7_bypass.rs

test(e2e): retry transient forward proxy stale policy responses (#1929)

2026-06-16 17:11:58 -07:00

gateway_start.rs

feat(sandbox): add stop and start operations (#2653)

2026-08-13 06:13:54 +00:00

gpu.rs

test(e2e): run gpu workloads from manifest (#1709)

2026-06-30 09:54:12 +02:00

host_gateway_alias.rs

feat(proxy): bind static credentials to provider endpoints (#2510)

2026-08-10 19:19:45 +00:00

kubernetes_corporate_proxy.rs

feat(kubernetes): support corporate upstream proxy (#2633)

2026-08-14 16:16:43 +00:00

landlock.rs

fix(supervisor): tailor Landlock rights by inode type (#2380)

2026-07-21 03:59:02 +00:00

live_policy_update.rs

feat(sandbox): use policy-first OCI image identity (#2509)

2026-07-29 05:27:21 +00:00

local_driver_token_restart.rs

feat(workspace): add workspace resource model with scoping, membershi… (#2243)

2026-07-21 00:59:18 +00:00

no_proxy.rs

feat: Openshell driver podman (#904)

2026-04-24 10:30:14 -07:00

oidc_pkce.rs

Wire authorization into workspace model (#2445)

2026-07-30 00:31:32 +00:00

podman_corporate_proxy.rs

feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy (#2245)

2026-07-24 16:51:52 +00:00

podman_gateway_start.rs

feat(sandbox): add stop and start operations (#2653)

2026-08-13 06:13:54 +00:00

podman_oci_identity.rs

feat(sandbox): use policy-first OCI image identity (#2509)

2026-07-29 05:27:21 +00:00

podman_userns.rs

feat(driver-podman): add userns config (#2562)

2026-08-15 17:10:47 +00:00

port_forward.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

provider_auto_create.rs

feat(providers): add credential refresh foundation (#1349)

2026-05-19 07:42:10 -07:00

provider_refresh_handles.rs

fix(providers): keep refresh credential handles stable (#2780)

2026-08-18 20:45:36 +00:00

proxy_egress_pipeline.rs

feat(proxy): bind static credentials to provider endpoints (#2510)

2026-08-10 19:19:45 +00:00

readyz_health.rs

fix(gateway): make readiness health checks dependency-aware (#1328)

2026-05-27 11:00:06 -07:00

sandbox_labels.rs

feat(workspace): add workspace resource model with scoping, membershi… (#2243)

2026-07-21 00:59:18 +00:00

sandbox_lifecycle.rs

feat(sandbox): add stop and start operations (#2653)

2026-08-13 06:13:54 +00:00

settings_management.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

smoke.rs

feat(vm): boot sandboxes from ext4 root disks (#1263)

2026-05-15 13:23:10 -07:00

sync.rs

fix(cli): fall back to regular upload when git filtering excludes all files (#1783)

2026-06-08 22:16:50 -07:00

upload_create.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

user_namespaces.rs

fix(tasks): format all Rust workspaces (#2268)

2026-07-14 17:37:38 +00:00

vm_gateway_start.rs

feat(sandbox): add stop and start operations (#2653)

2026-08-13 06:13:54 +00:00

websocket_conformance.rs

feat(proxy): bind static credentials to provider endpoints (#2510)

2026-08-10 19:19:45 +00:00

workspace_lifecycle.rs

feat(workspace): add workspace resource model with scoping, membershi… (#2243)

2026-07-21 00:59:18 +00:00

workspace_namespace_managed.rs

feat(k8s): add namespace-per-workspace support (RFC 0011 Phase 3) (#2656)

2026-08-14 21:22:41 +00:00

workspace_namespace_operator.rs

feat(k8s): add namespace-per-workspace support (RFC 0011 Phase 3) (#2656)

2026-08-14 21:22:41 +00:00