Documentation
¶
Overview ¶
Package shardpaths declares the set of HTTP paths that are served by a shard (or the cache server) as shard-wide resources and must not be reachable via a workspace-scoped URL such as /clusters/<ws>/<path> or /services/cache/shards/<sh>/clusters/<ws>/<path>.
Index ¶
Constants ¶
This section is empty.
Variables ¶
var Paths = sets.New(
"/metrics",
)
Paths enumerates the URL paths that are shard-level only. The filters in pkg/server/filters and pkg/cache/server reject any workspace-scoped request targeting one of these paths, and scope a top-level request to the root workspace for RBAC evaluation.
Note: /livez, /readyz, /healthz are intentionally NOT in this set. They must remain accessible via /clusters/<ws>/{healthz,...} so that authorized in-workspace clients can probe shard liveness without bypassing workspace scoping for everything else they do. Their workspace-scoped form returns the same process-level result as the bare URL; nothing leaks.
Functions ¶
This section is empty.
Types ¶
This section is empty.
Source Files