fix(sandbox): adapt reverse control to published backend protocol

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

Author: drew

crates/openshell-core/src/isolation_registration.rs

@@ -51,9 +51,10 @@ impl SandboxTransport {
                         .iter()
                         .all(|address| address.port() != 0 && !address.ip().is_unspecified())
             }
-            Self::RuntimeInitiatedTcp { authority, listen_address } => {
-                !authority.is_empty() && listen_address.port() != 0
-            }
+            Self::RuntimeInitiatedTcp {
+                authority,
+                listen_address,
+            } => !authority.is_empty() && listen_address.port() != 0,
             Self::Vsock { guest_cid, port } => {
                 *guest_cid >= 3 && *guest_cid != u32::MAX && *port != 0 && *port != u32::MAX
             }
@@ -91,6 +92,12 @@ pub fn validate_registrations(registrations: &[BackendRegistration]) -> Result<(
     let mut names = BTreeSet::new();
     for registration in registrations {
         validate_backend_name(&registration.name)?;
+        if matches!(
+            registration.endpoint,
+            SandboxTransport::RuntimeInitiatedTcp { .. }
+        ) {
+            return Err("runtime-initiated control is not a registered backend endpoint");
+        }
         if !names.insert(&registration.name) {
             return Err("duplicate isolation backend registration");
         }

crates/openshell-driver-kubernetes/src/isolation.rs

@@ -75,8 +75,14 @@ impl KubernetesOuterFenceEvidence<'_> {
                 "Kubernetes provisioning evidence is incomplete".to_string(),
             ));
         }
-        if self.runtime_control_policy.as_ref().is_some_and(|control| !control.is_bound()) {
-            return Err(BackendError::Descriptor("Kubernetes control policy evidence is incomplete".into()));
+        if self
+            .runtime_control_policy
+            .as_ref()
+            .is_some_and(|control| !control.is_bound())
+        {
+            return Err(BackendError::Descriptor(
+                "Kubernetes control policy evidence is incomplete".into(),
+            ));
         }
         let encoded = serde_json::to_vec(self).map_err(|error| {
             BackendError::Descriptor(format!("encode Kubernetes outer fence evidence: {error}"))

crates/openshell-sandbox-backend/src/runtime.rs

@@ -183,12 +183,7 @@ impl OpenShellRuntimeBackend {
     ) -> Result<(Option<String>, bool), BackendError> {
         let mut client = BoundaryClient::new(descriptor, bearer);
         client.transport = transport;
-        match client.call_idempotent(Request::DiscoverPolicy).await? {
-            Response::ImagePolicy { yaml, invalid } => Ok((yaml, invalid)),
-            _ => Err(BackendError::Descriptor(
-                "expected image policy discovery response".to_string(),
-            )),
-        }
+        client.discover_policy().await
     }
 
     pub fn new(
@@ -1966,7 +1961,8 @@ impl BoundaryClient {
         let transport = Arc::new(TransportAbort::default());
         let connector_transport = transport.clone();
         let authority = match &runtime_descriptor.transport {
-            SandboxTransport::Tcp { authority, .. } => authority.as_str(),
+            SandboxTransport::Tcp { authority, .. }
+            | SandboxTransport::RuntimeInitiatedTcp { authority, .. } => authority.as_str(),
             SandboxTransport::Unix { .. } | SandboxTransport::Vsock { .. } => {
                 "boundary.openshell.internal"
             }
@@ -2610,6 +2606,7 @@ mod tests {
             let result = OpenShellRuntimeBackend::discover_policy(
                 tls_runtime_descriptor(address, client_tls),
                 test_bearer(&"a".repeat(32)),
+                BoundaryTransport::default(),
             )
             .await;
             assert!(
@@ -2652,6 +2649,7 @@ mod tests {
             let result = OpenShellRuntimeBackend::discover_policy(
                 tls_runtime_descriptor(address, client_tls),
                 test_bearer(&"a".repeat(32)),
+                BoundaryTransport::default(),
             )
             .await;
             assert!(

crates/openshell-sandbox-backend/src/runtime/test_support.rs

@@ -723,7 +723,7 @@ fn client(peer: Peer) -> Arc<BoundaryClient> {
     .unwrap();
     let mut client =
         BoundaryClient::with_backend(descriptor, bearer, crate::BACKEND_NAME.into(), vec![]);
-    client.connector = Some(Arc::new(Connector {
+    client.transport = crate::BoundaryTransport::connector(Arc::new(Connector {
         peer,
         address,
         task,
@@ -861,7 +861,7 @@ pub fn backend(
     )
     .unwrap();
     let mut backend = crate::OpenShellRuntimeBackend::new(ca, credentials, bearer);
-    backend.connector.clone_from(&peer.connector);
+    backend.transport.clone_from(&peer.transport);
     backend.delegated = Some(crate::runtime::DelegatedRuntime {
         backend_name: name,
         descriptor,