Julian Sommer 1426cdd072 fix: URL-encode IAM policy documents in Query API responses (#1123) ...

AWS percent-encodes every policy document it returns. Spinifex returned
raw JSON, so a client decoding once read '+' as a space and '%41' as 'A',
giving perpetual Terraform drift, and a lone '%' failed the read.

Encode in the gateway wrappers for CreateRole, GetRole, ListRoles,
GetRolePolicy, GetUserPolicy, GetGroupPolicy, GetPolicyVersion and the
instance-profile reads. The service layer keeps raw JSON because STS and
spx admin parse it in-process. The web UI now decodes role inline
policies like every other document.

2026-09-28 14:31:16 +10:00

..

account_scoping_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

assumed_role_test.go

fix: return InsufficientInstanceCapacity with a 5xx status (#903)

2026-08-27 09:14:30 +10:00

bedrock_test.go

feat: Ochre catalog serving spec and a servable self-host model (#672)

2026-08-03 12:34:07 +10:00

conformance_policy_test.go

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

conformance_policy.go

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

conformance_test.go

feat: add AWS model conformance coverage (#736)

2026-08-05 18:46:37 +10:00

conformance-known-findings.md

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

conformance-promoted-services.json

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

conformance.go

feat: add AWS model conformance coverage (#736)

2026-08-05 18:46:37 +10:00

cross_tenant_test.go

fix: route the EKS update reads so they refuse instead of reading as a typo (#1084)

2026-09-18 17:10:48 +10:00

daemon_lite.go

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

describe_instances_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

ecr_authorization_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

ecr_daemon_lite.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

ecr_registry_test.go

test: complete the e2e live-vs-mock rebalance (epic mulga-8oyg3) (#566)

2026-07-22 17:02:20 +10:00

ecr_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

harness.go

feat(bedrock): gate Ochre models behind per-account access grants (#741)

2026-08-06 16:17:10 +10:00

iam_groups_test.go

fix: URL-encode IAM policy documents in Query API responses (#1123)

2026-09-28 14:31:16 +10:00

iam_roles_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

iam_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

image_daemon_lite.go

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

image_test.go

feat: partition EBS metadata keys by owning account (#989)

2026-09-03 15:38:23 +10:00

keypair_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

launchtemplate_daemon_lite.go

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

launchtemplate_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

main_test.go

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

nats_stub.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

placementgroup_daemon_lite.go

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

predastore_test.go

refactor(test): route duplicated NATS bootstraps through testutil (#776)

2026-08-12 22:38:15 +10:00

request_conformance_collector_test.go

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

request_conformance_test.go

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

request_conformance.go

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

routetable_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

run_instances_capacity_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

run_instances_clienttoken_test.go

test: assert the gateway->vpcd->OVN crossing in the integration tier (#572)

2026-07-22 18:17:24 +10:00

run_instances_launchtemplate_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

run_instances_malformed_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

run_instances_passrole_test.go

fix: authorize EC2 PassRole against the stored role ARN (#1008)

2026-09-07 10:54:05 +10:00

run_instances_placementgroup_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

run_instances_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

segscan_oracle_test.go

test: rebuild the predastore fixture and service tests on the facade

2026-08-11 17:23:42 +10:00

serial_console_test.go

test: rebalance E2E into in-process integration tier + shared-guest live scenarios (#556)

2026-07-21 16:46:18 +10:00

service_daemon_lite.go

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

shared_nats.go

fix(test): reclaim fixture scratch dirs stranded in /tmp (#598)

2026-07-29 14:57:50 +10:00

spot_daemon_lite.go

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

spot_instance_test.go

fix: return InsufficientInstanceCapacity with a 5xx status (#903)

2026-08-27 09:14:30 +10:00

sts_test.go

fix(sts): reject session policies and tags as unsupported, and echo SourceIdentity (#1105)

2026-09-24 16:31:03 +10:00

tags_test.go

chore: cleanup code comments

2026-08-04 14:20:19 +10:00

volume_daemon_lite.go

feat: model-driven request conformance in the integration suite (#1122)

2026-09-28 14:14:15 +10:00

volume_test.go

feat: decouple the EC2 control plane from the viperblock engine behind an EBSProvider contract (#770)

2026-08-12 16:54:19 +10:00

vpc_ordering_test.go

test: assert the gateway->vpcd->OVN crossing in the integration tier (#572)

2026-07-22 18:17:24 +10:00

vpc_sg_test.go

test: assert the gateway->vpcd->OVN crossing in the integration tier (#572)

2026-07-22 18:17:24 +10:00

vpc_topology_test.go

test: assert the gateway->vpcd->OVN crossing in the integration tier (#572)

2026-07-22 18:17:24 +10:00

vpcd_lite.go

test: assert the gateway->vpcd->OVN crossing in the integration tier (#572)

2026-07-22 18:17:24 +10:00