Documentation
¶
Overview ¶
Package endpointpolicy holds the controller's admission webhook for the EndpointPolicy CRD (proposal 034 Phase 1b, service-scoped UDS delivery). It runs the agent's own resolver rules over the declared socket, so a value the data plane would refuse — a bad path segment, or a file name that overflows the AF_UNIX sun_path budget on the csi.aether.io carrier (proposal 039) — is rejected at apply time instead of degrading one service to TCP with a resolve-failure count on every node that hosts it.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Validate ¶
func Validate(spec *configv1.EndpointPolicySpec) error
Validate checks an EndpointPolicy spec: proto rules (targetRef shape, socket shape) plus the socket's resolvability. A nil spec is rejected — an EndpointPolicy that declares nothing is always an authoring mistake.
Source Files