Cwcow policy changes - #2842
Open
Takuro Sato (takuro-sato) wants to merge 1 commit into
Open
Conversation
Takuro Sato (takuro-sato)
marked this pull request as ready for review
August 6, 2026 16:27
Takuro Sato (takuro-sato)
force-pushed
the
cwcow-policy-changes
branch
from
August 18, 2026 14:45
cd6a0ec to
6f9c1ac
Compare
Contributor
|
Takuro Sato (@takuro-sato) are all the commits necessary? can you clean them up (e.g. rebase drop/squash/edit messages)? if we squash merge, the message is going to be way too long. |
Takuro Sato (takuro-sato)
force-pushed
the
cwcow-policy-changes
branch
from
September 3, 2026 15:56
6f9c1ac to
02a8eee
Compare
Contributor
Author
|
Maksim An (@anmaxvl) I squashed the branch into a single commit with a much shorter message. I considered splitting it into logical commits, but the changes are too tightly coupled to keep each commit buildable. |
Apply policy decisions to container creation, exec, environment, stdio, storage, mounts, registry changes, and CIM lifecycle operations. Validate forwarded requests and unsupported fields, maintain policy state consistently, and fail closed when host operations fail. Co-authored-by: Mahati Chamarthy <mahati.chamarthy@gmail.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Signed-off-by: Takuro Sato <takurosato@microsoft.com>
Takuro Sato (takuro-sato)
force-pushed
the
cwcow-policy-changes
branch
from
September 4, 2026 10:05
02a8eee to
f265533
Compare
Maksim An (anmaxvl)
requested review from
KenGordon and
Tingmao Wang (micromaomao)
September 4, 2026 17:29
Contributor
|
Tingmao Wang (@micromaomao) , KenGordon review policy changes, I'll take a look at sidecar code. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Changes
Misc changes