Epic Goal

• Agent policy performs additional validation for each ttRPC API requests in the Guest VM, this epic goal is to allow to configure it.

Why is this important?

• Users of peer-pods/CoCo may wan't to be able to block certain calls, due to suspecting that some components were compromised or simply to change the defaults (CoCo)  

Scenarios

1. Setting custom policy at podvm image creation time
2. Setting custom policy at pod runtime

Acceptance Criteria 

1. User is able to set custom policy at podvm image creation time
2. User is able to set custom policy at pod runtime
3. Instructions to the customization is provided
4. Tests to verify customization is applied 

Additional context:

• https://github.com/kata-containers/kata-containers/blob/main/docs/how-to/how-to-use-the-kata-agent-policy.md

• https://issues.redhat.com/browse/KATA-3073 (development has been completed as part of this phase)