RFC0055 Identity-Aware Routing#4910

Open

rkoster wants to merge 30 commits into

mainfrom

feature/app-to-app-mtls-routing

Commits on May 4, 2026

Add allowed_sources support for mTLS app-to-app routing
rkoster
committed
Add unit tests for allowed_sources validation
rkoster
committed
Fix allowed_sources validation to handle symbol keys
rkoster
committed
Rename allowed_sources to mtls_allowed_sources for clarity
rkoster
committed
Refactor mTLS route options to RFC-0027 compliant flat format
rkoster
committed
Implement RFC domain-scoped mTLS routing with /v3/access_rules API
rkoster
committed
Fix access_rules_controller permissions query
rkoster
committed
Add automatic Diego sync callbacks to RouteAccessRule
rkoster
committed
Implement include=selector_resource for /v3/access_rules endpoint
rkoster
committed
Add space_guids filtering to /v3/access_rules endpoint
rkoster
committed
Implement include=route for /v3/access_rules endpoint
rkoster
committed
Remove name field from access rules, add read-only relationships per RFC updates
rkoster
committed
Add metadata support to RouteAccessRule model
rkoster
committed
Fix class loading for RouteAccessRule metadata models
rkoster
committed
Add validation to prevent access rules on internal domains per RFC
rkoster
committed
Consolidate access rules migrations, fix RuboCop offenses, and clean up tests
rkoster
committed
Fix race condition, double join, LIKE injection, N+1 queries, and domain API surface in access rules
rkoster
committed
Fix incomplete LIKE metacharacter escaping (CodeQL rb/incomplete-sanitization)
rkoster
committed
Add tests for LIKE metacharacter escaping (backslash, underscore)
rkoster
committed
Fix MySQL key length limit in metadata table migration
rkoster
committed
Fix routing_info_spec: remove nonexistent name field from RouteAccessRule
rkoster
committed
Fix route presenter regression: include options: {} when empty
rkoster
committed
Fix CI failures: route presenter options logic and domain V2 serialization
rkoster
committed
Rebrand: access rules → route policies, selector → source
rkoster
committed
Fix test failures: complete terminology rebrand in specs
rkoster
committed
Fix routing_info_spec: use enforce_route_policies field names
rkoster
committed
Fix domain_create_message_spec: use enforce_route_policies field names
rkoster
committed
Fix route_policies_spec: use 'Source' terminology and 'sources' query param
rkoster
committed
Revert: restore label_selector (was incorrectly renamed to label_source)
rkoster
committed

Commits on May 7, 2026

Add API documentation for Route Policies
rkoster
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

RFC0055 Identity-Aware Routing#4910

RFC0055 Identity-Aware Routing#4910
rkoster wants to merge 30 commits into
mainfrom
feature/app-to-app-mtls-routing

Commits on May 4, 2026

Add allowed_sources support for mTLS app-to-app routing

Add unit tests for allowed_sources validation

Fix allowed_sources validation to handle symbol keys

Rename allowed_sources to mtls_allowed_sources for clarity

Refactor mTLS route options to RFC-0027 compliant flat format

Implement RFC domain-scoped mTLS routing with /v3/access_rules API

Fix access_rules_controller permissions query

Add automatic Diego sync callbacks to RouteAccessRule

Implement include=selector_resource for /v3/access_rules endpoint

Add space_guids filtering to /v3/access_rules endpoint

Implement include=route for /v3/access_rules endpoint

Remove name field from access rules, add read-only relationships per RFC updates

Add metadata support to RouteAccessRule model

Fix class loading for RouteAccessRule metadata models

Add validation to prevent access rules on internal domains per RFC

Consolidate access rules migrations, fix RuboCop offenses, and clean up tests

Fix race condition, double join, LIKE injection, N+1 queries, and domain API surface in access rules

Fix incomplete LIKE metacharacter escaping (CodeQL rb/incomplete-sanitization)

Add tests for LIKE metacharacter escaping (backslash, underscore)

Fix MySQL key length limit in metadata table migration

Fix routing_info_spec: remove nonexistent name field from RouteAccessRule

Fix route presenter regression: include options: {} when empty

Fix CI failures: route presenter options logic and domain V2 serialization

Rebrand: access rules → route policies, selector → source

Fix test failures: complete terminology rebrand in specs

Fix routing_info_spec: use enforce_route_policies field names

Fix domain_create_message_spec: use enforce_route_policies field names

Fix route_policies_spec: use 'Source' terminology and 'sources' query param

Revert: restore label_selector (was incorrectly renamed to label_source)

Commits on May 7, 2026

Add API documentation for Route Policies