Appliances Egress
Egress policy · OCR Extract v2.5.0
Explicit allowlist of outbound destinations. An empty list means a sealed appliance.
Policy
| Host | Port | Purpose | |
|---|---|---|---|
| api.stripe.com | 443 | Payment verification | |
| s3.us-west-2.amazonaws.com | 443 | Result storage |
About this page
Exactly which outside destinations an appliance may contact — host, port, and stated purpose, declared up front. Everything else is sealed off at the network level: if it isn’t on this list, the appliance physically can’t reach it.
Behind this page/appliances/versions/:packageVersionId/egress · CanManageAppliances
Retrieve
Allowlist rows fromApplianceVersionEgressRequirements; policy enum guarded by CK_APV_Egress (EgressPolicy IN Sealed/Allowlist).Save
Rows are materialized bysp_AppliancePkg_CreateVersion from the manifest networkAccess.Success
- Empty allowlist = sealed appliance.
- Policy is constrained to Sealed or Allowlist.
- Egress is derived from the manifest, not free-typed.
CLI handoff
Implement this scaffold from the structured contract, then remove hard-coded preview rows. The source of truth is CLI Handoff and admin-cli-manifest.json.
Page IDappliance-egress
Route/appliances/versions/:packageVersionId/egress
AccessCanManageAppliances
Statuscatalog-schema-ready-content-not-seeded
Server-inject identity and scope values; never trust browser-supplied account, app, tenant, user, entitlement, price, or permission identifiers. Preserve the loading, empty, forbidden, failed, retrying, and completed states shown by the preview.