Krzysztof Malczuk e38d7254e6 fix(policy): reject unknown endpoint security modes (#3187) ...

* fix(policy): reject unknown endpoint security modes

Closes #3046

Validate TLS, enforcement, and access values across policy and provider profile ingress, and prevent runtime parsing from falling back to audit for unknown enforcement values.

Signed-off-by: Krzysztof Malczuk <kmalczuk@redhat.com>

* fix(policy)!: use enums for endpoint security modes

Replace the public TLS, enforcement, and access strings with protobuf enums and carry the typed values through policy composition, provider profiles, drivers, and runtime conversion.

Preserve the documented YAML spellings, reject unknown and invalid numeric enum values consistently, and update generated Go bindings, SDK conversions, tests, and policy documentation.

Signed-off-by: Krzysztof Malczuk <kmalczuk@redhat.com>

---------

Signed-off-by: Krzysztof Malczuk <kmalczuk@redhat.com>

2026-09-18 16:48:33 +00:00

..

src

fix(policy): reject unknown endpoint security modes (#3187)

2026-09-18 16:48:33 +00:00

testdata

feat(policy): preserve exact MCP revision allowlists (#3027)

2026-09-05 04:24:49 +00:00

Cargo.toml

feat(policy): establish one canonical authored policy representation (#3334)

2026-09-16 17:36:31 +00:00