From f127c2e94da6210e74f680a5f1e96e24af7393cf Mon Sep 17 00:00:00 2001 From: Paul Meyer <49727155+katexochen@users.noreply.github.com> Date: Wed, 13 Nov 2024 11:09:53 +0100 Subject: [PATCH] kata.genpolicy: fix rules-coordinator patch Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com> (cherry picked from commit b41b8a651ec5cce3766c8c757e8f4cd5859fa6ee) --- .../kata/genpolicy/genpolicy_rules_coordinator.patch | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/packages/by-name/kata/genpolicy/genpolicy_rules_coordinator.patch b/packages/by-name/kata/genpolicy/genpolicy_rules_coordinator.patch index 4dba9fa5e2..81bd5d79a1 100644 --- a/packages/by-name/kata/genpolicy/genpolicy_rules_coordinator.patch +++ b/packages/by-name/kata/genpolicy/genpolicy_rules_coordinator.patch @@ -1,8 +1,8 @@ diff --git a/genpolicy-rules.rego b/genpolicy-rules.rego -index c3eb334..a796740 100644 +index 823e5e76d55bac47ad9c79d8916f92702efa316d..e3acc09dd931fd8d028eadf356679a97dfa4e633 100644 --- a/genpolicy-rules.rego +++ b/genpolicy-rules.rego -@@ -164,9 +164,9 @@ allow_by_sandbox_name(p_oci, i_oci, p_storages, i_storages, s_name) { +@@ -199,9 +199,9 @@ allow_by_sandbox_name(p_container, i_oci, i_storages, s_name) { p_namespace := p_oci.Annotations[s_namespace] i_namespace := i_oci.Annotations[s_namespace] print("allow_by_sandbox_name: p_namespace =", p_namespace, "i_namespace =", i_namespace) @@ -11,5 +11,5 @@ index c3eb334..a796740 100644 - allow_by_container_types(p_oci, i_oci, s_name, p_namespace) + allow_by_container_types(p_oci, i_oci, s_name, i_namespace) - allow_by_bundle_or_sandbox_id(p_oci, i_oci, p_storages, i_storages) + allow_by_bundle_or_sandbox_id(p_container, i_oci, i_storages) allow_process(p_oci, i_oci, s_name)