feat(ci): allow explicitly granted public layer4 exposure #120

Open
L0GYKAL wants to merge 8 commits from feat/minecraft-public-layer4 into main
Owner

Allow spoke permissions to declare exposure: public when the Hub supplies an explicit public_caddy_l4_allow grant. Retains tailnet support and fails closed for other values.

Allow spoke permissions to declare exposure: public when the Hub supplies an explicit public_caddy_l4_allow grant. Retains tailnet support and fails closed for other values.
ci: define strict Caddy layer 4 spoke contract
All checks were successful
lint / lint (pull_request) Successful in 44s
lint / release-gate (pull_request) Successful in 1s
3ba934e093
fix(ci): reject undeclared multi-platform pulls
All checks were successful
lint / lint (pull_request) Successful in 49s
lint / release-gate (pull_request) Successful in 0s
d80a88781e
fix(ci): reject unauthenticated rules submodule URLs
Some checks failed
lint / lint (pull_request) Failing after 50s
lint / release-gate (pull_request) Failing after 0s
fbdd52550b
test(ci): keep k3s fixture on canonical rules URL
All checks were successful
lint / lint (pull_request) Successful in 47s
lint / release-gate (pull_request) Successful in 0s
ffbb097da9
fix(network): require dedicated layer4 ingress
All checks were successful
lint / lint (pull_request) Successful in 49s
lint / release-gate (pull_request) Successful in 1s
fc254f03ef
feat(ci): bind layer-4 routes to backend networks
All checks were successful
lint / lint (pull_request) Successful in 52s
lint / release-gate (pull_request) Successful in 0s
6e3aa78441
feat(ci): account shared OCI bindings once
All checks were successful
lint / lint (pull_request) Successful in 48s
lint / release-gate (pull_request) Successful in 0s
98f01844a3
feat(ci): allow explicitly granted public layer4 exposure
All checks were successful
lint / lint (pull_request) Successful in 48s
lint / release-gate (pull_request) Successful in 2s
f3274bfabd
All checks were successful
lint / lint (pull_request) Successful in 48s
lint / release-gate (pull_request) Successful in 2s
Required
Details
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin feat/minecraft-public-layer4:feat/minecraft-public-layer4
git switch feat/minecraft-public-layer4
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
L0GYKAL/the-rules!120
No description provided.