Early return for 'some in' statement (#427)

* fix: use early exit in 'some in' statements

Update kata tests:
Since 'early return' now works with 'some in' statement, interpreter
does not do any evaluation after it found match for rule, therefore
we don't have other rule checks after interpreter found match
This commit is contained in:
Kirill Zabelin
2025-07-08 20:47:06 +02:00
committed by GitHub
parent 0a9864f3ec
commit a29bfeeb4f
13 changed files with 33 additions and 801 deletions
+1 -42
View File
@@ -394,11 +394,7 @@
"tests/kata/data/pod-exec/policy.rego:395: allow_readonly_paths 1: true",
"tests/kata/data/pod-exec/policy.rego:398: allow_readonly_paths 2: start",
"tests/kata/data/pod-exec/policy.rego:346: allow_linux: true",
"tests/kata/data/pod-exec/policy.rego:85: CreateContainerRequest: true",
"tests/kata/data/pod-exec/policy.rego:63: ======== CreateContainerRequest: trying next policy container",
"tests/kata/data/pod-exec/policy.rego:67: CreateContainerRequest: p_pidns = false i_pidns = false",
"tests/kata/data/pod-exec/policy.rego:72: CreateContainerRequest: p Version = 1.1.0-rc.1 i Version = 1.1.0-rc.1",
"tests/kata/data/pod-exec/policy.rego:75: CreateContainerRequest: p Readonly = false i Readonly = true"
"tests/kata/data/pod-exec/policy.rego:85: CreateContainerRequest: true"
],
[],
[],
@@ -1590,7 +1586,6 @@
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"52f23a0b-0f09-4673-9541-5636889b6ca7\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"Ready ${POD_IP}!\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo Ready ${POD_IP}!"
],
@@ -1603,7 +1598,6 @@
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"f1d04442-303f-40cb-ac48-eff1f9406895\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"Ready ${POD_IP}!\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo Ready ${POD_IP}!"
],
@@ -1614,8 +1608,6 @@
"tests/kata/data/pod-exec/policy.rego:1192: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"bd33b367-2e42-4a83-8cf6-817eb10a1795\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"${ISTIO_META_APP_CONTAINERS}\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}"
],
@@ -1628,8 +1620,6 @@
"tests/kata/data/pod-exec/policy.rego:1192: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"df812e16-cae6-46c4-b0fa-fdcc0e67472c\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"${ISTIO_META_APP_CONTAINERS}\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}"
],
@@ -1641,7 +1631,6 @@
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"30724ed8-fff6-4b60-949d-e1380ace3706\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"Ready ${POD_IP}!\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo Ready ${POD_IP}!"
],
@@ -1654,8 +1643,6 @@
"tests/kata/data/pod-exec/policy.rego:1192: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"91fdfbb6-07fa-4db6-b0be-c4a96f9a55f0\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"${ISTIO_META_APP_CONTAINERS}\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}"
],
@@ -1667,7 +1654,6 @@
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"37faef9b-60ad-4b1d-a421-9481e3e4f155\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"Ready ${POD_IP}!\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo Ready ${POD_IP}!"
],
@@ -1680,8 +1666,6 @@
"tests/kata/data/pod-exec/policy.rego:1192: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"45cce89a-2b14-4af8-a139-a24246b3def0\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"${ISTIO_META_APP_CONTAINERS}\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}"
],
@@ -1693,7 +1677,6 @@
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"3e1adff3-61e4-467e-9b4c-f74e253287b3\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"Ready ${POD_IP}!\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo Ready ${POD_IP}!"
],
@@ -1707,7 +1690,6 @@
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"1e3e1846-0136-4a05-aa7b-29601f7503f7\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"Ready ${POD_IP}!\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo Ready ${POD_IP}!"
],
@@ -1718,8 +1700,6 @@
"tests/kata/data/pod-exec/policy.rego:1192: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"f8119a2e-06c8-4e6e-b94d-c7d360ae0c6e\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"${ISTIO_META_APP_CONTAINERS}\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}"
],
@@ -1733,7 +1713,6 @@
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"4afec5b2-c29e-42f6-adbb-410b398dc377\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"Ready ${POD_IP}!\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo Ready ${POD_IP}!"
],
@@ -1744,8 +1723,6 @@
"tests/kata/data/pod-exec/policy.rego:1192: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"f6abfe03-0dca-41e8-b6a5-d4364c205005\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"${ISTIO_META_APP_CONTAINERS}\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}"
],
@@ -1758,8 +1735,6 @@
"tests/kata/data/pod-exec/policy.rego:1192: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"00945adb-7fa5-43b6-8dc0-b5d36378d1dc\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"${ISTIO_META_APP_CONTAINERS}\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}"
],
@@ -1771,7 +1746,6 @@
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"301bb564-c4fd-484b-8c46-4044c051ba9f\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"Ready ${POD_IP}!\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo Ready ${POD_IP}!"
],
@@ -1784,8 +1758,6 @@
"tests/kata/data/pod-exec/policy.rego:1192: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"28470f50-4f0c-4fca-a247-9634c70d5512\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"${ISTIO_META_APP_CONTAINERS}\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}"
],
@@ -1797,7 +1769,6 @@
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"bbe55000-3e78-43a4-963a-c762cde3a0e2\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"Ready ${POD_IP}!\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo Ready ${POD_IP}!"
],
@@ -1810,8 +1781,6 @@
"tests/kata/data/pod-exec/policy.rego:1192: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"ac547fa2-97c2-4026-9e5a-5c1a51a2fdb1\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"${ISTIO_META_APP_CONTAINERS}\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}"
],
@@ -1823,7 +1792,6 @@
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"de7ce829-d867-4ada-a8df-08de72c3fec2\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"Ready ${POD_IP}!\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo Ready ${POD_IP}!"
],
@@ -1836,8 +1804,6 @@
"tests/kata/data/pod-exec/policy.rego:1192: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"a1b1e13c-d22f-41e6-857f-dd256f3f0d6a\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"${ISTIO_META_APP_CONTAINERS}\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}"
],
@@ -1849,7 +1815,6 @@
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"bfb9e571-b1dd-4217-b4a5-6d4d7c277332\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"Ready ${POD_IP}!\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo Ready ${POD_IP}!"
],
@@ -1863,7 +1828,6 @@
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"7829bfcf-0e79-4e1c-ab63-3e715f3551d7\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"Ready ${POD_IP}!\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo Ready ${POD_IP}!"
],
@@ -1874,8 +1838,6 @@
"tests/kata/data/pod-exec/policy.rego:1192: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"56ccd0f4-1142-49a4-9732-146efca8e771\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"${ISTIO_META_APP_CONTAINERS}\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}"
],
@@ -1888,8 +1850,6 @@
"tests/kata/data/pod-exec/policy.rego:1192: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"ebb9afb5-e802-491d-9a4c-a49e9c0e655b\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"${ISTIO_META_APP_CONTAINERS}\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo ${ISTIO_META_APP_CONTAINERS}"
],
@@ -1901,7 +1861,6 @@
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_APP_CONTAINERS}",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo Ready ${POD_IP}!",
"tests/kata/data/pod-exec/policy.rego:1201: ExecProcessRequest 2: true",
"tests/kata/data/pod-exec/policy.rego:1196: ExecProcessRequest 2: p_command = echo ${ISTIO_META_NODE_NAME} startup",
"tests/kata/data/pod-exec/policy.rego:1204: ExecProcessRequest 3: input = {\"container_id\": \"42cd455d88baf5b3d2a94fe7bdef82da5bcca78d6c2c62149724a952897bf5b6\", \"exec_id\": \"15ba4186-176e-4903-b8c9-672f676645ef\", \"process\": {\"ApparmorProfile\": \"\", \"Args\": [\"echo\", \"Ready ${POD_IP}!\"], \"Capabilities\": null, \"ConsoleSize\": null, \"Cwd\": \"/\", \"Env\": [\"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\", \"HOSTNAME=exec-test\", \"POD_IP=10.244.0.16\", \"SERVICE_ACCOUNT=default\", \"POD_NAME=exec-test\", \"POD_NAMESPACE=default\", \"PROXY_CONFIG={}\\n\", \"ISTIO_META_POD_PORTS=[\\n]\", \"ISTIO_META_APP_CONTAINERS=serviceaclient\", \"ISTIO_META_CLUSTER_ID=Kubernetes\", \"ISTIO_META_NODE_NAME=aks-nodepool1-38464071-vmss000000\", \"KUBERNETES_PORT_443_TCP_ADDR=10.0.0.1\", \"KUBERNETES_SERVICE_HOST=10.0.0.1\", \"KUBERNETES_SERVICE_PORT=443\", \"KUBERNETES_SERVICE_PORT_HTTPS=443\", \"KUBERNETES_PORT=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP=tcp://10.0.0.1:443\", \"KUBERNETES_PORT_443_TCP_PROTO=tcp\", \"KUBERNETES_PORT_443_TCP_PORT=443\"], \"NoNewPrivileges\": false, \"OOMScoreAdj\": 0, \"Rlimits\": [], \"SelinuxLabel\": \"\", \"Terminal\": false, \"User\": {\"AdditionalGids\": [0, 10], \"GID\": 0, \"UID\": 0, \"Username\": \"\"}}, \"string_user\": null}",
"tests/kata/data/pod-exec/policy.rego:1207: ExecProcessRequest 3: i_command = echo Ready ${POD_IP}!"
],