Charlotte Hartmann Paludo 2cea32cc23 genpolicy: match sandbox name by regex ...

`allow_interactive_exec` requires a sandbox-name annotation, however
this is only added for pods by genpolicy. Other pod-generating resources
have unpredictable sandbox names.

This patch instead uses a regex for the sandbox name in genpolicy, based
on the specified metadata and following Kubernetes' naming logic. The
generated regex is then used in the policy to correctly match the
sandbox name.

Fixes: #11823

Signed-off-by: Charlotte Hartmann Paludo <git@charlotteharludo.com>
Co-authored-by: Paul Meyer <katexochen0@gmail.com>
Co-authored-by: Markus Rudy <mr@edgeless.systems>

2025-09-23 10:31:58 +02:00

..

agent-ctl

runtime-rs: Add selinux support for hypervisor

2025-09-21 13:59:17 +08:00

csi-kata-directvolume

build(deps): bump github.com/ulikunitz/xz

2025-09-08 11:30:49 +01:00

genpolicy

genpolicy: match sandbox name by regex

2025-09-23 10:31:58 +02:00

kata-ctl

versions(deps): Bump slab versions prior to 0.4.10

2025-09-15 09:48:03 +02:00

log-parser

versions: Tidy up go.mod versions

2025-09-08 14:03:47 +01:00

runk

versions(deps): Bump slab versions prior to 0.4.10

2025-09-15 09:48:03 +02:00

trace-forwarder

versions(deps): Bump slab versions prior to 0.4.10

2025-09-15 09:48:03 +02:00