plugin-egress
| Placement | compiled-in (in-process) |
| Source | github.com/opencharly/charly/candy/plugin-egress |
| Version | 2026.181.0001 |
| Candy | plugin-egress |
This plugin is listed in charly/charly.yml’s compiled_plugins:, so its providers are compiled into the charly binary and register in-process.
Providers
Section titled “Providers”The reserved words this plugin serves:
egress— verb class
What it does
Section titled “What it does”EGRESS VALIDATION plugin (M16) — gates the config artifacts charly WRITES to a system (cloud-init user-data/meta/net, k8s manifests + kustomization, traefik routes, install-ledger records, the Containerfile + systemd/supervisord units, the libvirt domain XML) against a CUE schema BEFORE the bytes hit disk. The validation logic + the egress CUE schemas (incl. the vendored cloud-config) live here; charly’s in-core ValidateEgress* functions are a thin shim that Invokes this plugin’s OpValidate. Compiled-in (the build/deploy hot paths call it many times).
See also the candy reference for this candy’s install surface.