Cameron Baird 29ee46c186 genpolicy: Handle PodSecurityContext.fsGroup|supplementalGroups ...

Policy enforcement for additionalGids, A list of groups applied to the first process run in each container.

Manifests in OCI struct as additionalGids: Consists of container's GID, fsGroup, and supplementalGroups.

https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#PodSecurityContext-v1-core

Signed-off-by: Cameron Baird <cameronbaird@microsoft.com>

2025-05-13 21:44:51 +00:00

..

agent

Merge pull request #11242 from houstar/qing/safe-path

2025-05-12 10:58:19 -04:00

dragonball

build(deps): bump tokio to 1.44.2

2025-05-06 11:38:52 +01:00

kata-opa

…

libs

versions: Update tempfile crate

2025-05-09 09:57:28 +01:00

mem-agent

build(deps): bump tokio to 1.44.2

2025-05-06 11:38:52 +01:00

runtime

runtime/config: Add VFIO config for IBM SEL

2025-05-12 14:58:29 +02:00

runtime-rs

runtime/config: Add VFIO config for IBM SEL

2025-05-12 14:58:29 +02:00

tools

genpolicy: Handle PodSecurityContext.fsGroup|supplementalGroups

2025-05-13 21:44:51 +00:00