ai-gov: add l7 local policy - #26162
Merged
craig-osterhout merged 2 commits intoSep 23, 2026
Merged
Conversation
Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
✅ Deploy Preview for docsdocker ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
craig-osterhout
marked this pull request as ready for review
September 22, 2026 22:40
Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
dvdksn
approved these changes
Sep 23, 2026
3 tasks
craig-osterhout
added a commit
that referenced
this pull request
Sep 30, 2026
## Description Document HTTP method and path rules for organization policies. An organization network rule can match specific HTTP methods and URL paths on a destination. Local policy support shipped in #26162, so this PR covers the organization side. | Page | What changed | | --- | --- | | [`organization.md`](https://deploy-preview-26060--docsdocker.netlify.app/ai/sandboxes/governance/access-controls/organization/) | The network rule composer, including the **All traffic** and **HTTP** rule types, the accepted destinations, and how the composer's **any (\*)** differs from the CLI's `--method ANY`. Note that HTTP rules are evaluated per request | | [`network.md`](https://deploy-preview-26060--docsdocker.netlify.app/ai/sandboxes/governance/access-controls/network/) | Routes to both configuration paths, the composer and the CLI | | [`concepts.md`](https://deploy-preview-26060--docsdocker.netlify.app/ai/sandboxes/governance/concepts/) | Table comparing what organization and local HTTP rules accept for methods, destinations, and paths | | [`local.md`](https://deploy-preview-26060--docsdocker.netlify.app/ai/sandboxes/governance/access-controls/local/) | That `--path` takes one path per rule | | [`monitoring.md`](https://deploy-preview-26060--docsdocker.netlify.app/ai/sandboxes/governance/monitor-and-enforce/monitoring/) | How the `SUMMARY` column counts one decision with entries at both layers | | [`_index.md`](https://deploy-preview-26060--docsdocker.netlify.app/ai/sandboxes/governance/access-controls/) & [`_index.md`](https://deploy-preview-26060--docsdocker.netlify.app/ai/sandboxes/governance/) | Network bullet no longer limits HTTP rules to local policy | ## Related issues or tickets ENGDOCS-3373 ## Reviews - [ ] Technical review - [ ] Editorial review - [ ] Product review Signed-off-by: Craig Osterhout <craig.osterhout@docker.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Document HTTP method and path rules for local policy. A local network rule can
match specific HTTP methods and URL paths on a destination. No org/admin updates in this update.
Supersedes #26060 without ask policies.
concepts.mdnetwork.mdlocal.md--methodand--pathhow-to, split out from the existing rule management. Path must be canonical, and each rule takes one path. Troubleshooting entry for a method or path blocked on an allowed hostmonitoring.md--type httplisting with the method and path columns, and the(L4)and(L7)labels in the summary_index.md&_index.mdRelated issues or tickets
ENGDOCS-3373
Reviews