ManifestSubmitErrorToHTTP maps manifest submit errors to HttpError for gateway responses.

NewPolicyRuleRegistry creates a new registry with default resource mappings

WithGPU sets the GPU field in the declarative configuration to the given value and returns the receiver, so that objects can be built by chaining "Wit

WithGSeq sets the GSeq field in the declarative configuration to the given value and returns the receiver, so that objects can be built by chaining "W

WithLeaseID sets the LeaseID field in the declarative configuration to the given value and returns the receiver, so that objects can be built by chain

WithOSeq sets the OSeq field in the declarative configuration to the given value and returns the receiver, so that objects can be built by chaining "W

cleanupStaleRBACResources removes ServiceAccounts, Roles, and RoleBindings that belong to services that no longer have permissions in the current mani

dpQuery sends one typed read request to the per-node psutil API connector and waits for the response, honoring the caller's context, the discovery lif

getWorkloadPermissions extracts all permission types from the service params and returns them as a WorkloadPermissions struct. NOTE: Currently only Re

hasPermissions returns true if any permissions are defined for this workload. This checks all permission types (read, write, delete).

skip integration-only tests. using build tags breaks tooling for compilation, etc...

sanitizedDomain Make sure no funny chars are in the cert names (like wildcards ;)).

sparamsInterconnect pulls the per-service interconnect scheduler params off a nullable SchedulerParams chain. Returns nil when the service has no inte

BuildRoleBinding creates a new RoleBinding builder for the given workload.

BuildRouteExtensions returns auxiliary CRD objects to apply alongside the HTTPRoute (e.g. an NGF SnippetsFilter). They are applied owner-referenced to

DeclareHostname Declare that a given deployment should be connected to a given hostname

DeleteHTTPRoute removes an HTTPRoute by hostname. If allowMissing is true, NotFound errors are ignored.

Description returns a human-readable description of what this migration does.

Get returns a migration by name, or nil if not found.

GetProvider retrieves a Gateway provider from the default registry. This is the primary entry point for obtaining Gateway providers.

GetQuote collects a hardware-signed attestation report with the given report_data (typically the tenant's nonce, or a hash binding the nonce to additi

Inventories returns a InventoryInformer.

InventoryRequests returns a InventoryRequestInformer.

LeaseStatus provides a mock function for the type Client