confidential-containers / trustee

Attestation and Secret Delivery Components
Apache License 2.0
51 stars 77 forks source link

AS: PolicyEngine should differentiate user and internal errors #394

Closed mkulke closed 1 week ago

mkulke commented 1 month ago

At the moment we conflate user errors (policy fails to pass, requested policy does not exist) with internal errors (io errors). Signatures and code of those functions should be adapted, so that grpc/http api layers can produce different error codes instead of returning an "internal error" in all cases.

prior discussion