Shiju 5643e1f905 fix(policy): normalize protocol names before OPA validation (#3251) ...

* fix(supervisor): canonicalize L7 protocols before OPA

Normalize recognized protocol spellings before supervisor validation and Rego authorization so mixed-case MCP policies cannot take the REST rule path. Reject null MCP configuration instead of silently defaulting it, and cover both behaviors with regression tests.

Signed-off-by: Shiju <shiju@nvidia.com>

* test(policy): cover normalization for every supported protocol

Exercise TCP, REST, WebSocket, GraphQL, SQL, JSON-RPC and MCP through YAML and protobuf loading with lowercase, uppercase and mixed-case names.

Assert canonical names in raw OPA data and returned L7 configuration, preserve TCP L4 behavior, and verify that normalization leaves unrelated data unchanged and is idempotent.

Signed-off-by: Shiju <shiju@nvidia.com>

---------

Signed-off-by: Shiju <shiju@nvidia.com>

2026-09-10 20:40:38 +00:00

..

data

feat(network): enable Docker and Podman policy DNS and transparent TCP (#2723)

2026-08-20 19:26:53 +00:00

src

fix(policy): normalize protocol names before OPA validation (#3251)

2026-09-10 20:40:38 +00:00

testdata

refactor(openshell-sandbox): Split sandbox into process and network subcrates. (#1650)

2026-06-15 15:16:23 -04:00

tests

refactor(inference): remove managed inference routes (#3195)

2026-09-09 18:47:22 +00:00

Cargo.toml

refactor(inference): remove managed inference routes (#3195)

2026-09-09 18:47:22 +00:00