Enum EgressPosture 

pub enum EgressPosture {
    Open,
    Unsealed,
    BestEffort,
    Sealed,
}

Conservative network posture inferred from launch options.

Customer-managed connector ARNs do not prove internet isolation: their VPC routing must be checked separately. No combination of flags is automatically Sealed.

Variants

Open

INTERNET_EGRESS is on the request: the VM has outbound network by design.

Unsealed

Internet isolation has not been verified. This is the default launch posture.

BestEffort

Advisory in-guest proxy denial (crate::sandbox::RunRequest::deny_egress). A workload can bypass it by ignoring its environment.

Sealed

Internet isolation verified separately through VPC routing configuration. Retained for stored labels; never inferred by EgressPosture::for_launch.

Implementations

impl EgressPosture

pub fn for_launch(egress: bool, deny_egress: bool) -> Self

The posture of a launch that requested egress and asked for deny_egress.

These flags cannot verify VPC routing, so this never returns Sealed.

pub fn as_str(self) -> &'static str

The wire spelling, which is what an envelope and a --json consumer branch on.

Four values and no Option: a consumer never has to guard against a missing posture, and none of the four is the empty string a bool degrades into.

pub fn is_sealed(self) -> bool

Whether outbound traffic is refused by something other than the workload’s goodwill.

Only EgressPosture::Sealed answers true. EgressPosture::BestEffort does not, and that is the whole reason this predicate exists rather than a posture != Open test at each call site.

pub fn from_label(label: &str) -> Option<Self>

The posture a stored label names, or None for a string this version does not know.

The inverse of EgressPosture::as_str, and it exists for one caller: the CLI’s name registry persists the label of the launch a name was registered for, and agent-up’s refresh path reads it back in a later process rather than assuming the posture of the launch it did not perform. None rather than a default, so the caller decides what an unreadable record means instead of inheriting a claim.

pub fn describe(self) -> &'static str

One sentence a human can act on, printed beside the label.

Each names the mechanism rather than a verdict, because “no egress” read as a verdict is the defect.

Trait Implementations

impl Clone for EgressPosture

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for EgressPosture

impl Debug for EgressPosture

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for EgressPosture

Defaults to the posture of a launch with no network flags.

fn default() -> Self

Returns the “default value” for a type.

impl Display for EgressPosture

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for EgressPosture

impl Hash for EgressPosture

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for EgressPosture

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for EgressPosture