Feature Overview (aka. Goal Summary)  

CoCo/peer-pods users may want to block certain operations (or to modify the default blocked operations in CoCo) for the kata-agent either at runtime, to a certain workload or in advance- at image creation time.

Goals (aka. expected user outcomes)

Allowed operations can be modified at runtime or in advance

Requirements (aka. Acceptance Criteria):

Ability to customize agent policy at rutnime

Ability to customize agent policy at image creation

References

• https://github.com/kata-containers/kata-containers/blob/main/docs/how-to/how-to-use-the-kata-agent-policy.md 

• This follows KATA-2716