Files
kata-containers/src
stevenhorsman 5c171e7321 agent: add policy-gated resize_volume stub to AgentService
ResizeVolumeRequest is declared in agent.proto and has a rules.rego
default entry, but the kata-agent had no corresponding ttrpc handler
in the AgentService impl block.  This meant the CI policy-coverage
check (ci/check_agent_policy_coverage.sh) correctly flagged it as
ungated.

Add a resize_volume handler that:
  - calls is_allowed(&req) so the policy boundary is enforced, and
  - returns UNIMPLEMENTED, reflecting that the kata-agent has never
    carried out volume resizes itself (runtime-rs exercises this RPC
    via its own agent client; the kata-agent path was simply absent).

Generated-By: IBM Bob
Signed-off-by: stevenhorsman <steven@uk.ibm.com>
2026-06-29 10:49:26 +01:00
..