feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy#2245

Open

feloy wants to merge 8 commits into

NVIDIA:mainfrom

feloy:fix-1792-corporate-proxy-podman

Commits on Jul 16, 2026

feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy
feloy
committed
fix(sandbox,podman): make corporate proxy routing operator-owned
feloy
committed
feat(sandbox,podman): deliver corporate proxy credentials via secret file
feloy
committed
fix(sandbox,podman): fail closed on invalid upstream proxy configuration
feloy
committed
fix(sandbox,podman): finish the fail-closed upstream proxy credential contract
feloy
committed
fix(sandbox,podman): close remaining fail-open upstream proxy config paths
feloy
committed
fix(sandbox,podman): reject upstream proxy URLs with path, query, or fragment
feloy
committed
fix(sandbox,podman): remove plain-HTTP upstream proxy support
feloy
committed