Fabiano Fidêncio 8f78b4f50c tests: use OCI 1.2.1 policy drop-in for microk8s ...

microk8s' bundled containerd emits OCI runtime spec version 1.2.1, but
the auto-generated agent policy defaulted to the base genpolicy-settings
value of 1.1.0 because install_genpolicy_drop_ins() had no microk8s
branch. The version mismatch made the guest reject CreateContainerRequest
("blocked by policy", p Version = 1.1.0 vs i Version = 1.2.1), so pod
sandbox creation failed with PermissionDenied and deployments never rolled
out.

Apply the 20-oci-1.2.1 drop-in for microk8s, alongside the existing
CBL-Mariner case, and refresh the drop-in README to reflect the current
per-distribution OCI versions.

Signed-off-by: Fabiano Fidêncio <ffidencio@nvidia.com>
Assisted-by: Cursor <cursoragent@cursor.com>

2026-07-24 12:21:08 +02:00

..

kata-dictionary.txt

tests: use OCI 1.2.1 policy drop-in for microk8s

2026-07-24 12:21:08 +02:00