frozenprocess/Telepathy NetworkPolicy Check
Simulate Kubernetes Network Security Policies in CI using Calico's real policy engine. No cluster required.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| topology | Path (repo-relative) to the topology YAML: endpoints + namespaces piped to the engine as the evaluation Request. | yes | — |
| policy | Path (repo-relative) to a policy manifest file OR a directory of *.yaml/*.yml policies to evaluate. | yes | — |
| assertions | Path to a connectivity assertions file (list of {from,to,expect}). When set, the assertion gate runs and fails the job on a mismatch. | no | "" |
| mode | What to run: auto | test | diff | both. auto = both when `assertions` is set, else diff. | no | auto |
| image | telepathy Docker image to run. | no | ghcr.io/frozenprocess/telepathy:latest |
| base-ref | Git ref to diff against for the connectivity diff. Defaults to the PR base branch. | no | ${{ github.base_ref }} |
| comment | Post/update a sticky PR comment with the connectivity diff (needs pull-requests: write). | no | true |
| fail-on-diff | Fail the job if any flow changed (git diff --exit-code style). The assertion gate fails independently of this. | no | false |
| github-token | Token used to post the PR comment. | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| changed | "true" if any flow changed between base and head. |
| opened | Number of flows newly allowed (deny -> allow). |
| closed | Number of flows newly denied (allow -> deny). |