William Trépanier 0618ab0465 fix(supervisor): log unmatched L7 route denials (#2916) ...

Requests denied by relay_with_route_selection because no L7 endpoint path
matched returned a 403 without emitting an OCSF event or recording policy
activity, leaving the deny invisible to operators and telemetry. Every
other early-return deny in that loop already logs.

Emit an HTTP Activity deny event and an l7_policy activity record before
writing the denial. Split event construction out of emit_l7_request_log
so the event shape is directly testable, and narrow both helpers to take
the request action rather than the full L7RequestInfo, which they only
used for that field.

Signed-off-by: William Trépanier <wtrep@icloud.com>

2026-08-26 21:29:56 +00:00

..

data

feat(network): enable Docker and Podman policy DNS and transparent TCP (#2723)

2026-08-20 19:26:53 +00:00

src

fix(supervisor): log unmatched L7 route denials (#2916)

2026-08-26 21:29:56 +00:00

testdata

refactor(openshell-sandbox): Split sandbox into process and network subcrates. (#1650)

2026-06-15 15:16:23 -04:00

tests

fix(proxy): retry with backoff on transient accept errors instead of exiting (#2369)

2026-07-27 18:15:10 +00:00

Cargo.toml

feat(provider): support for SPIFFE backed token exchange (#1970)

2026-08-24 05:42:30 +00:00