Skip to content

rfc-0010: gateway interceptors#1927

Merged
drew merged 18 commits into
mainfrom
gateway-hooks
Jul 14, 2026
Merged

rfc-0010: gateway interceptors#1927
drew merged 18 commits into
mainfrom
gateway-hooks

Conversation

@drew

@drew drew commented Jun 16, 2026

Copy link
Copy Markdown
Collaborator

Note

The RFC is open for feedback.

Summary

Adds RFC-0010 for Gateway Interceptors, a proposed gateway extension system for deployment-specific business logic around OpenShell gateway API operations.

Operators and external integrators need a flexible way to customize gateway API behavior to fit their own requirements — for example, enforcing tenancy, quotas, naming conventions, or policy authority. Today any such customization has to be hardcoded into gateway handlers or pushed into drivers, which mixes responsibilities and does not scale to deployment-specific requirements.

This RFC proposes a first-class extension system that lets external services observe, modify, validate, reject, or audit gateway operations at well-defined phases. We call these Gateway Interceptors.

Related to #1919

Checklist

  • Follows Conventional Commits
  • Commits are signed off (DCO)
  • Architecture docs updated (if applicable)

Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@copy-pr-bot

copy-pr-bot Bot commented Jun 16, 2026

Copy link
Copy Markdown

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

drew added 2 commits June 16, 2026 00:05
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew drew changed the title docs(rfc): add gateway interceptors RFC rfc-0010: gateway interceptors Jun 16, 2026
@drew drew added the rfc label Jun 16, 2026
@drew drew moved this from Todo to In progress in OpenShell Roadmap Jun 16, 2026
@ddurst-nvidia

This comment was marked as resolved.

drew added 2 commits June 23, 2026 00:06
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew drew marked this pull request as ready for review June 23, 2026 07:36
@drew drew requested review from a team, derekwaynecarr, maxamillion and mrunalp as code owners June 23, 2026 07:36
Comment thread rfc/0010-gateway-interceptors/README.md
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
Comment thread rfc/0010-gateway-interceptors/README.md

@ddurst-nvidia ddurst-nvidia left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for updating the RFC, having a "nameable" GatewayInterceptor helps on readability, and reduces a lot of ambiguity I was seeing with "Interceptor."

I misspoke and got pulled into the weeds of the implementation branch. We should define a specific service ServiceName { rpc...} here, so the contract is fully named and can be referred to consistently in the RFC.

Comment thread rfc/0010-gateway-interceptors/README.md
Comment thread rfc/0010-gateway-interceptors/README.md Outdated
@johntmyers johntmyers added this to the OpenShell Beta milestone Jun 23, 2026
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@pimlock pimlock mentioned this pull request Jun 23, 2026
4 tasks

@ddurst-nvidia ddurst-nvidia left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

GatewayInterceptor is a huge help, thanks!

Comment thread rfc/0010-gateway-interceptors/README.md Outdated
Comment thread rfc/0010-gateway-interceptors/README.md
Comment thread rfc/0010-gateway-interceptors/README.md Outdated
Comment thread rfc/0010-gateway-interceptors/README.md Outdated
Comment thread rfc/0010-gateway-interceptors/README.md Outdated
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
Comment thread rfc/0010-gateway-interceptors/README.md Outdated
Comment thread rfc/0010-gateway-interceptors/README.md Outdated
Comment thread rfc/0010-gateway-interceptors/README.md Outdated
drew added 3 commits June 24, 2026 09:16
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
Comment thread rfc/0010-gateway-interceptors/README.md Outdated
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@github-actions

Copy link
Copy Markdown

This pull request has had no activity for 14 days and is now marked stale. It may be closed in 7 days if there is no further activity.

@github-actions github-actions Bot added the state:stale Inactive item at risk of automatic closure. label Jul 12, 2026
@drew drew removed the state:stale Inactive item at risk of automatic closure. label Jul 14, 2026
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@copy-pr-bot

copy-pr-bot Bot commented Jul 14, 2026

Copy link
Copy Markdown

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

@drew drew merged commit 96fd31f into main Jul 14, 2026
4 of 6 checks passed
@drew drew deleted the gateway-hooks branch July 14, 2026 23:12
@github-project-automation github-project-automation Bot moved this from In progress to Done in OpenShell Roadmap Jul 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

5 participants