Skip to content

fix(sandbox): use succinct endpoint denial reason#1584

Merged
krishicks merged 1 commit into
mainfrom
hicks/push-ywumnnqyqyto
May 27, 2026
Merged

fix(sandbox): use succinct endpoint denial reason#1584
krishicks merged 1 commit into
mainfrom
hicks/push-ywumnnqyqyto

Conversation

@krishicks
Copy link
Copy Markdown
Collaborator

Summary

Previously, if no policy allowed a particular endpoint, every single configured policy would be listed in the denial log message, getting truncated not long after the first policy was listed. This makes it much more succinct and should fit without truncation.

Related Issue

Changes

Testing

  • mise run pre-commit passes
  • Unit tests added/updated
  • E2E tests added/updated (if applicable)

Checklist

  • Follows Conventional Commits
  • Commits are signed off (DCO)
  • Architecture docs updated (if applicable)

Signed-off-by: Kris Hicks <khicks@nvidia.com>
@krishicks krishicks enabled auto-merge (squash) May 26, 2026 23:45
@johntmyers johntmyers added the test:e2e Requires end-to-end coverage label May 27, 2026
@github-actions
Copy link
Copy Markdown

Label test:e2e applied for 7d74ae7. Open the existing run and click Re-run all jobs to execute with the label set. The run will execute the standard E2E suite after building the required gateway and supervisor images once. The matching required CI gate status on this PR will flip green automatically once the run finishes.

@krishicks krishicks merged commit db40831 into main May 27, 2026
48 checks passed
@krishicks krishicks deleted the hicks/push-ywumnnqyqyto branch May 27, 2026 15:25
st-gr pushed a commit to st-gr/OpenShell that referenced this pull request May 28, 2026
Signed-off-by: Kris Hicks <khicks@nvidia.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

test:e2e Requires end-to-end coverage

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants