Dan Mihai 159bc2713f rootfs: add default agent policy file ...

Restricting access to agent endpoints using agent-config.toml is
expected to be deprecated in the main branch. Therefore, in
preparation of merging this script with its main branch version,
install default settings for main branch's kata-opa service.

coco-default.rego blocks access to the same kata agent endpoints
that are blocked by agent-config.toml. For additional information,
search for "default-policy.rego" in main branch's rootfs.sh.

Fixes: #8219

Signed-off-by: Dan Mihai <dmihai@microsoft.com>

2023-10-17 13:16:45 +00:00

..

osbuilder

rootfs: add default agent policy file

2023-10-17 13:16:45 +00:00

packaging

cc|rootfs: Define SEALED_SECRET for cc-rootfs-initrd-tarball

2023-10-12 14:28:46 +02:00