-
Bug
-
Resolution: Done
-
Medium
-
None
-
None
-
None
Description
Setting agent policy using annotation is failing.
Steps to reproduce
<What actions did you take to hit the bug?>
1. have a upstream peer-pods setup with AGENT_POLICY=yes enabled
2. make sure the default policy file in the podvm rootfs allow SetPolicy call
3. start a (peer) pod with the policy in the annotation and check if it's blocked (e.g. don't allow exec and try to exec into the pod)
see
Expected result
the policy should be applied and rpc calls should be blocked accordingly
Actual result
policy is ignored
Additional helpful info
- This is a follow up of
KATA-3074 - agent-policy docs
- slack conversation