From 45df4d0d9b577fecee798d672695fe24ff57fb1b Mon Sep 17 00:00:00 2001 From: mo khan Date: Tue, 15 Jul 2025 16:37:08 -0600 Subject: feat: migrate from Cedar to SpiceDB authorization system This is a major architectural change that replaces the Cedar policy-based authorization system with SpiceDB's relation-based authorization. Key changes: - Migrate from Rust to Go implementation - Replace Cedar policies with SpiceDB schema and relationships - Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks - Update build system and dependencies for Go ecosystem - Maintain Envoy integration for external authorization This change enables more flexible permission modeling through SpiceDB's Google Zanzibar inspired relation-based system, supporting complex hierarchical permissions that were difficult to express in Cedar. Breaking change: Existing Cedar policies and Rust-based configuration will no longer work and need to be migrated to SpiceDB schema. --- vendor/rustix/src/net/mod.rs | 35 ----------------------------------- 1 file changed, 35 deletions(-) delete mode 100644 vendor/rustix/src/net/mod.rs (limited to 'vendor/rustix/src/net/mod.rs') diff --git a/vendor/rustix/src/net/mod.rs b/vendor/rustix/src/net/mod.rs deleted file mode 100644 index e5560905..00000000 --- a/vendor/rustix/src/net/mod.rs +++ /dev/null @@ -1,35 +0,0 @@ -//! Network-related operations. -//! -//! On Windows, one must call [`wsa_startup`] in the process before calling any -//! of these APIs. [`wsa_cleanup`] may be used in the process if these APIs are -//! no longer needed. -//! -//! [`wsa_startup`]: https://docs.rs/rustix/*/x86_64-pc-windows-msvc/rustix/net/fn.wsa_startup.html -//! [`wsa_cleanup`]: https://docs.rs/rustix/*/x86_64-pc-windows-msvc/rustix/net/fn.wsa_cleanup.html - -pub mod addr; -mod send_recv; -mod socket; -mod socket_addr_any; -#[cfg(not(any(windows, target_os = "wasi")))] -mod socketpair; -mod types; -#[cfg(windows)] -mod wsa; - -#[cfg(linux_kernel)] -pub mod netdevice; -pub mod sockopt; - -pub use crate::maybe_polyfill::net::{ - IpAddr, Ipv4Addr, Ipv6Addr, SocketAddr, SocketAddrV4, SocketAddrV6, -}; -pub use send_recv::*; -pub use socket::*; -pub use socket_addr_any::SocketAddrAny; -pub(crate) use socket_addr_any::SocketAddrBuf; -#[cfg(not(any(windows, target_os = "wasi")))] -pub use socketpair::socketpair; -pub use types::*; -#[cfg(windows)] -pub use wsa::{wsa_cleanup, wsa_startup}; -- cgit v1.2.3