Skip to content

(01) validator - #1796

Draft
daniel-noland wants to merge 51 commits into
mainfrom
pr/daniel-noland/fuzz-config-generators
Draft

(01) validator#1796
daniel-noland wants to merge 51 commits into
mainfrom
pr/daniel-noland/fuzz-config-generators

fix(config): Refuse an IPv6 peering at validation, not at apply

a28d6dd
Select commit
Loading
Failed to load commit list.
DCO-2 / DCO succeeded Sep 6, 2026 in 0s

Check passed!

All commits are signed off, the check passed.

Summary


Sha Message Pass or fail reason
🟢 318f056 docs(routing): say what a fib writer's destroy pan... Valid sign-off found
🟢 f64fbe5 fix(spec): restore the scheme-stripping regex in d... Valid sign-off found
🟢 8111997 feat(config): Generate port-forwarding exposes for... Valid sign-off found
🟢 491b84d feat(config): Generate masquerade exposes, and sha... Valid sign-off found
🟢 fd64849 feat(config): Generate static NAT exposes, and pin... Valid sign-off found
🟢 5cf5599 fix(config): Refuse a port-forwarding expose the d... Valid sign-off found
🟢 221d3a1 test(mgmt): Property-test the configuration chain,... Valid sign-off found
🟢 102f192 test(mgmt): Drive the config builder with generate... Valid sign-off found
🟢 2e7c5d8 test(k8s-intf): Generate configurations that are v... Valid sign-off found
🟢 83d1559 test(k8s-intf): Generate peering ACLs Valid sign-off found
🟢 2b4b608 test(mgmt): Build every dataplane table a validate... Valid sign-off found
🟢 5a62ba1 test(config): Hunt validator permissiveness with n... Valid sign-off found
🟢 29ba829 test(mgmt): Let a fuzzing engine drive the near-mi... Valid sign-off found
🟢 f9f237e test(k8s-intf): Draw prefixes from slots so expose... Valid sign-off found
🟢 d2ed353 fix(k8s-intf): Give every vpc its own slots, and a... Valid sign-off found
🟢 7244f02 test(mgmt): Check that a validated configuration h... Valid sign-off found
🟢 3a950b0 test(config): Assert the validator refuses what a ... Valid sign-off found
🟢 164e14e test(nat): Catch a static NAT table that holds one... Valid sign-off found
🟢 7ba9a4d fix(k8s-intf): Put the generated gateway in its ow... Valid sign-off found
🟢 492193a test(mgmt): Check that every expose leaves a trace Valid sign-off found
🟢 97efac9 test(mgmt): Follow the genid out of MasqueradeConf... Valid sign-off found
🟢 560ae80 fix(mgmt): Refuse an IPv6 peering by name instead ... Valid sign-off found
🟢 af6dc1a fix(mgmt): Route both build sites through the same... Valid sign-off found
🟢 32254e5 fix(k8s-intf): Refuse a slot budget the scheme can... Valid sign-off found
🟢 b9b0128 fix(k8s-intf): Give MAX_PREFIXES back its doc comm... Valid sign-off found
🟢 79ee159 fix(config): Document what the contract overlay he... Valid sign-off found
🟢 504d2ab fix(k8s-intf): Size the interface mask floor by th... Valid sign-off found
🟢 ad6a616 fix(k8s-intf): Let a spec span vnis, group sizes a... Valid sign-off found
🟢 300c96f fix(k8s-intf): Permute what a peering contains, no... Valid sign-off found
🟢 f990932 test(mgmt): Only assert on a rate when there is a ... Valid sign-off found
🟢 6530116 fix(k8s-intf): Let an expose name any subset of it... Valid sign-off found
🟢 db970de test(mgmt): Put the gateway in the group its peeri... Valid sign-off found
🟢 13e5a8e test(mgmt): Check that a peering's advertised pref... Valid sign-off found
🟢 c89f687 test(mgmt): Check the peering half of the chain, a... Valid sign-off found
🟢 aef4548 test(mgmt): Check what a vrf is, not just which vn... Valid sign-off found
🟢 26eeba0 test(nat): Check the ports and protocols a port-fo... Valid sign-off found
🟢 e12c573 test(mgmt): Build the acl and flow filters a valid... Valid sign-off found
🟢 4740f54 refactor(k8s-intf): Make the mutation list and the... Valid sign-off found
🟢 d4c6d6e refactor(k8s-intf): Delete the generators the slot... Valid sign-off found
🟢 9befaef fix(config): Let a caller fix the address family a... Valid sign-off found
🟢 707d146 fix(k8s-intf): Refuse an unseparable slot budget i... Valid sign-off found
🟢 3f05b83 fix(k8s-intf): Reach strum from a plain cargo test... Valid sign-off found
🟢 f529d2e test(mgmt): Say which half of the completeness pro... Valid sign-off found
🟢 4c2e20c test(config): Guard the static-nat shape check on ... Valid sign-off found
🟢 33c0348 test(k8s-intf): Give every expose its own checked ... Valid sign-off found
🟢 009599b test(k8s-intf): Carve exclusions out of the prefix... Valid sign-off found
🟢 e2c70b6 test(k8s-intf): Refuse to build a sibling for a de... Valid sign-off found
🟢 6b0548f test(k8s-intf): Draw acl match entries that name s... Valid sign-off found
🟢 d736f8a test(mgmt): Compare the acl, and stop treating a f... Valid sign-off found
🟢 aaf994f docs(mgmt): Say what IMPORT_VRFS actually gates Valid sign-off found
🟢 a28d6dd fix(config): Refuse an IPv6 peering at validation,... Valid sign-off found