mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-31 07:44:57 +08:00
OPA endpoint matching uses exact string equality (lower(ep.host) == lower(network.host)), not glob matching. Wildcard patterns like *.cursor.sh and *.vo.msecnd.net never matched any actual hostname. Replace wildcards with explicit hostnames: api2.cursor.sh, repo.cursor.sh, download.cursor.sh for Cursor; az764295.vo.msecnd.net and gallerycdn.vsassets.io for VS Code.