feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy - #2245

Merged

johntmyers merged 29 commits into

NVIDIA:mainfrom

feloy:fix-1792-corporate-proxy-podman

Jul 24, 2026

Commits on Jul 24, 2026

feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy

feloy
authored and
johntmyers
committed
fix(sandbox,podman): make corporate proxy routing operator-owned

feloy
authored and
johntmyers
committed
feat(sandbox,podman): deliver corporate proxy credentials via secret file

feloy
authored and
johntmyers
committed
fix(sandbox,podman): fail closed on invalid upstream proxy configuration

feloy
authored and
johntmyers
committed
fix(sandbox,podman): finish the fail-closed upstream proxy credential contract

feloy
authored and
johntmyers
committed
fix(sandbox,podman): close remaining fail-open upstream proxy config paths

feloy
authored and
johntmyers
committed
fix(sandbox,podman): reject upstream proxy URLs with path, query, or fragment

feloy
authored and
johntmyers
committed
fix(sandbox,podman): remove plain-HTTP upstream proxy support

feloy
authored and
johntmyers
committed
fix(sandbox,podman): escape generated TOML and require explicit proxy URL form

feloy
authored and
johntmyers
committed
fix(sandbox,podman): preserve tunneled bytes read with the CONNECT response

feloy
authored and
johntmyers
committed
fix(sandbox,podman): gate cleartext proxy Basic auth behind an explicit opt-in

feloy
authored and
johntmyers
committed
fix(sandbox,podman): honor port qualifiers and resolved addresses in NO_PROXY

feloy
authored and
johntmyers
committed
fix(sandbox,podman): bind proxied CONNECT tunnels to validated addresses

feloy
authored and
johntmyers
committed
fix(sandbox,podman): reject empty port after bracketed IPv6 proxy host

feloy
authored and
johntmyers
committed
fix(sandbox,podman): fall back across validated addresses in proxied CONNECT

feloy
authored and
johntmyers
committed
fix(sandbox,podman): strip new reserved proxy vars and complete docs/tests

feloy
authored and
johntmyers
committed
fix(sandbox,podman): cap each proxied CONNECT attempt within the shared budget

feloy
authored and
johntmyers
committed
fix(sandbox,podman): deliver corporate proxy config on the supervisor argv

feloy
authored and
johntmyers
committed
docs(sandbox): align proxy comments with the argv transport

feloy
authored and
johntmyers
committed
fix(sandbox): parse bracketed IPv6 authorities in client CONNECT targets

feloy
authored and
johntmyers
committed
test(podman): cover proxy-auth secret cleanup across lifecycle failures

feloy
authored and
johntmyers
committed
docs: list corporate proxy keys in the Podman compute-driver overview

feloy
authored and
johntmyers
committed
test(sandbox): cover the SSRF-to-TLS composition across the proxy tunnel

feloy
authored and
johntmyers
committed
fix(sandbox,podman): bound proxy-auth reads, reject port 0, fix stale comment

feloy
authored and
johntmyers
committed
fix(sandbox): open proxy-auth file non-blocking to reject FIFOs promptly

feloy
authored and
johntmyers
committed
test(podman): cover corporate proxy egress across driver and supervisor

feloy
authored and
johntmyers
committed
test(podman): restart the gateway on the proxy-config panic path

feloy
authored and
johntmyers
committed
fix(supervisor-network): derive the loopback proxy bypass from resolved IPs

feloy
authored and
johntmyers
committed
fix(podman): clean up proxy-auth secret when container already deleted

feloy
authored and
johntmyers
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy - #2245

feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy#2245
johntmyers merged 29 commits into
NVIDIA:mainfrom
feloy:fix-1792-corporate-proxy-podman

Commits on Jul 24, 2026

feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy

fix(sandbox,podman): make corporate proxy routing operator-owned

feat(sandbox,podman): deliver corporate proxy credentials via secret file

fix(sandbox,podman): fail closed on invalid upstream proxy configuration

fix(sandbox,podman): finish the fail-closed upstream proxy credential contract

fix(sandbox,podman): close remaining fail-open upstream proxy config paths

fix(sandbox,podman): reject upstream proxy URLs with path, query, or fragment

fix(sandbox,podman): remove plain-HTTP upstream proxy support

fix(sandbox,podman): escape generated TOML and require explicit proxy URL form

fix(sandbox,podman): preserve tunneled bytes read with the CONNECT response

fix(sandbox,podman): gate cleartext proxy Basic auth behind an explicit opt-in

fix(sandbox,podman): honor port qualifiers and resolved addresses in NO_PROXY

fix(sandbox,podman): bind proxied CONNECT tunnels to validated addresses

fix(sandbox,podman): reject empty port after bracketed IPv6 proxy host

fix(sandbox,podman): fall back across validated addresses in proxied CONNECT

fix(sandbox,podman): strip new reserved proxy vars and complete docs/tests

fix(sandbox,podman): cap each proxied CONNECT attempt within the shared budget

fix(sandbox,podman): deliver corporate proxy config on the supervisor argv

docs(sandbox): align proxy comments with the argv transport

fix(sandbox): parse bracketed IPv6 authorities in client CONNECT targets

test(podman): cover proxy-auth secret cleanup across lifecycle failures

docs: list corporate proxy keys in the Podman compute-driver overview

test(sandbox): cover the SSRF-to-TLS composition across the proxy tunnel

fix(sandbox,podman): bound proxy-auth reads, reject port 0, fix stale comment

fix(sandbox): open proxy-auth file non-blocking to reject FIFOs promptly

test(podman): cover corporate proxy egress across driver and supervisor

test(podman): restart the gateway on the proxy-config panic path

fix(supervisor-network): derive the loopback proxy bypass from resolved IPs

fix(podman): clean up proxy-auth secret when container already deleted