mirror of
https://github.com/docker/docs.git
synced 2026-10-25 06:09:46 +03:00
## Summary Restructures the Docker AI Governance documentation under \`/ai/sandboxes/governance/\` and adds the supporting API reference. Preview links: - https://deploy-preview-25162--docsdocker.netlify.app/ai/sandboxes/governance/ - https://deploy-preview-25162--docsdocker.netlify.app/reference/api/ai-governance/ ### Information architecture The existing \`security/governance\` and \`security/policy\` pages are merged into a new top-level \`governance\` section so local-policy and org-policy sit side by side instead of being split across unrelated parents: - \`/ai/sandboxes/governance/\` — section landing; explains local + org as layered enforcement - \`/ai/sandboxes/governance/concepts/\` — resource model, rule syntax, evaluation, precedence - \`/ai/sandboxes/governance/local/\` — \`sbx policy\` CLI for individual machines - \`/ai/sandboxes/governance/org/\` — Admin Console flow (was \`security/governance.md\`) - \`/ai/sandboxes/governance/monitoring/\` — \`sbx policy ls\` / \`sbx policy log\` ### API reference \`/reference/api/ai-governance/\` renders the Governance OpenAPI spec vendored at \`content/reference/api/ai-governance/api.yaml\` from \`docker/governor-services\`. Operations, schemas, examples, and status codes are fully driven by the spec — future updates land via re-vendor, not in-repo edits. Anything wrong in the rendered reference should be fixed upstream and re-vendored here. The spec has been re-vendored to the latest upstream version, which updated the server URL to \`hub.docker.com/v2\` and added the \`/governance/\` prefix to all API paths. ### Review focus 1. The \`/ai/sandboxes/governance/\` landing — does the local + org framing match how the product is positioned? 2. \`/reference/api/ai-governance/\` — does the rendered spec match the source of truth, and is anything important missing? Generated by Claude Code --------- Co-authored-by: Louis-Arnaud <la.catoire@gmail.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
27 lines
805 B
HTML
27 lines
805 B
HTML
{{/* Resolve a possibly-$ref'd OpenAPI node against the spec root.
|
|
|
|
Input dict:
|
|
api — the unmarshaled spec root (plain map from transform.Unmarshal)
|
|
node — the node to resolve; may be a map, slice, primitive, or nil
|
|
|
|
Returns:
|
|
- if node is a map containing a "$ref" key, returns the target node
|
|
reached by walking the JSON-Pointer fragment (only internal "#/" refs
|
|
are supported)
|
|
- otherwise returns node unchanged
|
|
*/}}
|
|
{{- $node := .node -}}
|
|
{{- if reflect.IsMap $node -}}
|
|
{{- with index $node "$ref" -}}
|
|
{{- if hasPrefix . "#/" -}}
|
|
{{- $parts := after 1 (split . "/") -}}
|
|
{{- $cur := $.api -}}
|
|
{{- range $parts -}}
|
|
{{- $cur = index $cur . -}}
|
|
{{- end -}}
|
|
{{- $node = $cur -}}
|
|
{{- end -}}
|
|
{{- end -}}
|
|
{{- end -}}
|
|
{{- return $node -}}
|