metropolis: Lock down visibility rules
This formalizes the package structure introduced by D683.
Test Plan: Pure refactor, CI only.
X-Origin-Diff: phab/D684
GitOrigin-RevId: 574aa14c71faf94f4a5c02a2110e2e3fef7d36ac
diff --git a/metropolis/test/e2e/k8s_cts/BUILD.bazel b/metropolis/test/e2e/k8s_cts/BUILD.bazel
index 0e43c24..2932758 100644
--- a/metropolis/test/e2e/k8s_cts/BUILD.bazel
+++ b/metropolis/test/e2e/k8s_cts/BUILD.bazel
@@ -22,7 +22,7 @@
base = ":kubectl_in_path",
binary = "@io_k8s_kubernetes//test/e2e:_go_default_test-pure",
pure = "on",
- visibility = ["//visibility:public"],
+ visibility = ["//metropolis/node:__pkg__"],
)
go_library(
@@ -51,5 +51,5 @@
"@com_github_bonzini_qboot//:qboot-bin",
],
embed = [":go_default_library"],
- visibility = ["//visibility:public"],
+ visibility = ["//visibility:private"],
)
diff --git a/metropolis/test/e2e/preseedtest/BUILD.bazel b/metropolis/test/e2e/preseedtest/BUILD.bazel
index 41b32e3..d33bcbc 100644
--- a/metropolis/test/e2e/preseedtest/BUILD.bazel
+++ b/metropolis/test/e2e/preseedtest/BUILD.bazel
@@ -12,5 +12,5 @@
name = "preseedtest",
embed = [":go_default_library"],
pure = "on",
- visibility = ["//visibility:public"],
+ visibility = ["//metropolis/node:__pkg__"],
)
diff --git a/metropolis/test/ktest/BUILD b/metropolis/test/ktest/BUILD
index d94831c..38f1f31 100644
--- a/metropolis/test/ktest/BUILD
+++ b/metropolis/test/ktest/BUILD
@@ -13,7 +13,7 @@
name = "ktest",
embed = [":go_default_library"],
pure = "on",
- visibility = ["//visibility:public"],
+ visibility = ["//metropolis:__subpackages__"],
)
kconfig_patch(
@@ -53,11 +53,11 @@
cp $$DIR/vmlinux $@
""",
- visibility = ["//visibility:public"],
+ visibility = ["//metropolis:__subpackages__"],
)
filegroup(
name = "test-script",
srcs = ["run_ktest.sh"],
- visibility = ["//visibility:public"],
+ visibility = ["//metropolis:__subpackages__"],
)
diff --git a/metropolis/test/ktest/init/BUILD.bazel b/metropolis/test/ktest/init/BUILD.bazel
index 4161146..0298a8e 100644
--- a/metropolis/test/ktest/init/BUILD.bazel
+++ b/metropolis/test/ktest/init/BUILD.bazel
@@ -12,5 +12,5 @@
name = "init",
embed = [":go_default_library"],
pure = "on",
- visibility = ["//visibility:public"],
+ visibility = ["//metropolis:__subpackages__"],
)
diff --git a/metropolis/test/launch/cli/launch-multi2/BUILD.bazel b/metropolis/test/launch/cli/launch-multi2/BUILD.bazel
index 4b51824..aeb19ec 100644
--- a/metropolis/test/launch/cli/launch-multi2/BUILD.bazel
+++ b/metropolis/test/launch/cli/launch-multi2/BUILD.bazel
@@ -26,5 +26,5 @@
"@com_github_bonzini_qboot//:qboot-bin",
],
embed = [":go_default_library"],
- visibility = ["//visibility:public"],
+ visibility = ["//:__pkg__"],
)
diff --git a/metropolis/test/launch/cli/launch/BUILD.bazel b/metropolis/test/launch/cli/launch/BUILD.bazel
index 6b1461d..72c8161 100644
--- a/metropolis/test/launch/cli/launch/BUILD.bazel
+++ b/metropolis/test/launch/cli/launch/BUILD.bazel
@@ -16,5 +16,5 @@
"//third_party/edk2:firmware",
],
embed = [":go_default_library"],
- visibility = ["//visibility:public"],
+ visibility = ["//:__pkg__"],
)
diff --git a/metropolis/test/nanoswitch/BUILD b/metropolis/test/nanoswitch/BUILD
index fa7e271..643d16b 100644
--- a/metropolis/test/nanoswitch/BUILD
+++ b/metropolis/test/nanoswitch/BUILD
@@ -26,7 +26,7 @@
name = "nanoswitch",
embed = [":go_default_library"],
pure = "on",
- visibility = ["//visibility:public"],
+ visibility = ["//visibility:private"],
)
node_initramfs(
@@ -37,5 +37,5 @@
# CA Certificate bundle
"@cacerts//file": "/etc/ssl/cert.pem",
},
- visibility = ["//visibility:public"],
+ visibility = ["//metropolis/test:__subpackages__"],
)