Add network middleware types (NetworkMiddlewareConfig, SupervisorMiddlewareService) #36

Proto Gap: Network Middleware Support

New proto messages for supervisor middleware pipelines and network middleware configuration. Currently marked as skipped in the coverage test with "tracked for a later PR."

Proto types to map

• NetworkMiddlewareConfig (sandbox.proto line 71): middleware configuration with enabled, timeout_ms, address, tls_ca, endpoints
• MiddlewareEndpointSelector (line 87): pattern-based endpoint selection for middleware routing
• SupervisorMiddlewareService (line 374): operator-registered middleware service metadata
• SandboxPolicy.network_middlewares field (line 33): map of middleware configs on policy
• GetSandboxConfigResponse.supervisor_middleware_services field (line 366)

Implementation scope

• Add NetworkMiddlewareConfig domain type
• Add MiddlewareEndpointSelector domain type
• Add SupervisorMiddlewareService domain type
• Add network_middlewares to SandboxPolicy type (currently in skipped set)
• Update policy converter to handle middleware fields
• Move network_middlewares from skipped to handled in coverage test
• Unit tests

Target drop

Drop D (Policy + Service + TCP + SSH)

References

• sandbox.proto lines 33, 71-90, 366, 374-380
• Upstream commits:
  • NVIDIA/OpenShell@d5567487 feat(supervisor-middleware): add network egress middleware
  • NVIDIA/OpenShell@32f05244 rfc-0009: supervisor middleware