[sgupta832]

Lets doctl compute microvm create set a per-MicroVM egress policy, using the API field added in godo v1.233.0.

Changes

• --egress-allow (repeatable): an exact domain, a *.example.com wildcard, or an exact IP. An IP literal becomes an ip rule; anything else becomes a domain rule. CIDR ranges, paths, ports and empty values are rejected before the request is sent.
• --egress-default-action: deny or allow. The API defaults to deny when a policy is set.
• Neither flag set: no policy is sent, so egress stays unrestricted (or a checkpoint restore keeps its origin's policy).
• The policy is returned in --output json, and is available as an Egress column via --format Egress. It is not in the default table so existing table output is unchanged.
• Bumps godo to v1.233.0.

The policy applies to public networking only and is fixed at create; the API enforces both. The microvm command group is still hidden, so there are no public docs to update.

Testing

• Unit tests: create request carries the policy; table test for the rule parsing.
• Integration test: compute microvm create with egress flags sends the expected egress_policy body.

Made with Cursor