gsadmin/spinifex
1
0
Fork 0
mirror of https://github.com/mulgadc/spinifex.git synced 2026-10-22 12:16:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

refactor: move network packages under the network domain

Browse Source 
Move spinifex/network/* to spinifex/domains/network/* as one enclosing
move so the L0-L5 layer invariants keep classifying every package from
a single root. Package names and dependency direction are unchanged;
invariant scan roots, the RG-10 sudo allow-list path, CODEOWNERS and
the repo-root walk in the IMDS netns unit test follow the new path.
This commit is contained in:
joshsiv-mulga
2026-10-07 08:15:48 +10:00
parent 1e27b03946
commit 7003168bc5
262 changed files with 307 additions and 307 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/security/network-connections/README.md
+1 -1
View File
@@ -81,7 +81,7 @@ The inventory in [§1](#1-inbound-listeners)–[§2](#2-outbound-connections) sa
- **Guest** — bound to a per-instance interface and reachable only by that instance's VM.
- **Localhost** — bound to `127.0.0.1`; not reachable off-node.
The listener invariant tests (`spinifex/network/invariants` and the multinode e2e suite) read
The listener invariant tests (`spinifex/domains/network/invariants` and the multinode e2e suite) read
this table and fail any Cluster- or Encap-scope port found bound to the wildcard address,
unless that row's Purpose or Auth text contains the exact phrase **"binds the wildcard by
design"**. That phrase is load-bearing, not incidental wording — a row that merely mentions