github/kata-containers
1
0
Fork 1
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-08-23 02:06:47 +00:00
Code Issues Projects Releases Wiki Activity

DO NOT MERGE: policy debugging

Browse Source
This commit is contained in:
stevenhorsman 2025-08-18 16:53:55 +01:00
parent 66c7f74683
commit b5cfd2afb1
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/agent/policy/src/policy.rs
View File

@ -125,6 +125,7 @@ impl AgentPolicy {
/// Ask regorus if an API call should be allowed or not. /// Ask regorus if an API call should be allowed or not.
pub async fn allow_request(&mut self, ep: &str, ep_input: &str) -> Result<(bool, String)> { pub async fn allow_request(&mut self, ep: &str, ep_input: &str) -> Result<(bool, String)> {
info!(sl!(), "policy check: {ep}, request: {ep_input}");
debug!(sl!(), "policy check: {ep}"); debug!(sl!(), "policy check: {ep}");
self.log_eval_input(ep, ep_input).await; self.log_eval_input(ep, ep_input).await;

2
src/tools/genpolicy/tests/policy/main.rs
View File

@ -93,7 +93,7 @@ mod tests {
}; };
let config = genpolicy::utils::Config { let config = genpolicy::utils::Config {
base64_out: false, base64_out: true,
config_files, config_files,
containerd_socket_path: None, // Some(String::from("/var/run/containerd/containerd.sock")), containerd_socket_path: None, // Some(String::from("/var/run/containerd/containerd.sock")),
insecure_registries: Vec::new(), insecure_registries: Vec::new(),