diff --git a/src/confcom/samples/aci/command/policy.rego b/src/confcom/samples/aci/command/policy.rego index 0ac22ef29d6..0a8288ed727 100644 --- a/src/confcom/samples/aci/command/policy.rego +++ b/src/confcom/samples/aci/command/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/command/policy_debug.rego b/src/confcom/samples/aci/command/policy_debug.rego index cbe8596bf74..5726d4f6d31 100644 --- a/src/confcom/samples/aci/command/policy_debug.rego +++ b/src/confcom/samples/aci/command/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/command/policy_disable_stdio.rego b/src/confcom/samples/aci/command/policy_disable_stdio.rego index 59e364df781..c93faa1ea15 100644 --- a/src/confcom/samples/aci/command/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/command/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/command/policy_fragment.rego b/src/confcom/samples/aci/command/policy_fragment.rego index f6b9b7c5508..70e92051fb0 100644 --- a/src/confcom/samples/aci/command/policy_fragment.rego +++ b/src/confcom/samples/aci/command/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/conflicting_variables/policy.rego b/src/confcom/samples/aci/conflicting_variables/policy.rego index c26263c6ad4..2564d1f4d7d 100644 --- a/src/confcom/samples/aci/conflicting_variables/policy.rego +++ b/src/confcom/samples/aci/conflicting_variables/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/conflicting_variables/policy_debug.rego b/src/confcom/samples/aci/conflicting_variables/policy_debug.rego index a928561ed0c..37ecc10f214 100644 --- a/src/confcom/samples/aci/conflicting_variables/policy_debug.rego +++ b/src/confcom/samples/aci/conflicting_variables/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/conflicting_variables/policy_disable_stdio.rego b/src/confcom/samples/aci/conflicting_variables/policy_disable_stdio.rego index 97bd7e09205..9177bee6ae8 100644 --- a/src/confcom/samples/aci/conflicting_variables/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/conflicting_variables/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/conflicting_variables/policy_fragment.rego b/src/confcom/samples/aci/conflicting_variables/policy_fragment.rego index 7084aab34f5..da895107e92 100644 --- a/src/confcom/samples/aci/conflicting_variables/policy_fragment.rego +++ b/src/confcom/samples/aci/conflicting_variables/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/container_group_profiles/policy.rego b/src/confcom/samples/aci/container_group_profiles/policy.rego index 54041c457f3..721ef3581f3 100644 --- a/src/confcom/samples/aci/container_group_profiles/policy.rego +++ b/src/confcom/samples/aci/container_group_profiles/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/container_group_profiles/policy_debug.rego b/src/confcom/samples/aci/container_group_profiles/policy_debug.rego index 2fe79cc3aa8..f33fa7b46c8 100644 --- a/src/confcom/samples/aci/container_group_profiles/policy_debug.rego +++ b/src/confcom/samples/aci/container_group_profiles/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/container_group_profiles/policy_disable_stdio.rego b/src/confcom/samples/aci/container_group_profiles/policy_disable_stdio.rego index 2eca9f7c45e..d4f5c46ce0c 100644 --- a/src/confcom/samples/aci/container_group_profiles/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/container_group_profiles/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/container_group_profiles/policy_fragment.rego b/src/confcom/samples/aci/container_group_profiles/policy_fragment.rego index 0b8d0c95bde..d9ea7a4f5a6 100644 --- a/src/confcom/samples/aci/container_group_profiles/policy_fragment.rego +++ b/src/confcom/samples/aci/container_group_profiles/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/default_variables/policy.rego b/src/confcom/samples/aci/default_variables/policy.rego index 54041c457f3..721ef3581f3 100644 --- a/src/confcom/samples/aci/default_variables/policy.rego +++ b/src/confcom/samples/aci/default_variables/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/default_variables/policy_debug.rego b/src/confcom/samples/aci/default_variables/policy_debug.rego index 2fe79cc3aa8..f33fa7b46c8 100644 --- a/src/confcom/samples/aci/default_variables/policy_debug.rego +++ b/src/confcom/samples/aci/default_variables/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/default_variables/policy_disable_stdio.rego b/src/confcom/samples/aci/default_variables/policy_disable_stdio.rego index 2eca9f7c45e..d4f5c46ce0c 100644 --- a/src/confcom/samples/aci/default_variables/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/default_variables/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/default_variables/policy_fragment.rego b/src/confcom/samples/aci/default_variables/policy_fragment.rego index 0b8d0c95bde..d9ea7a4f5a6 100644 --- a/src/confcom/samples/aci/default_variables/policy_fragment.rego +++ b/src/confcom/samples/aci/default_variables/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/default_variables_override/policy.rego b/src/confcom/samples/aci/default_variables_override/policy.rego index c26263c6ad4..2564d1f4d7d 100644 --- a/src/confcom/samples/aci/default_variables_override/policy.rego +++ b/src/confcom/samples/aci/default_variables_override/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/default_variables_override/policy_debug.rego b/src/confcom/samples/aci/default_variables_override/policy_debug.rego index a928561ed0c..37ecc10f214 100644 --- a/src/confcom/samples/aci/default_variables_override/policy_debug.rego +++ b/src/confcom/samples/aci/default_variables_override/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/default_variables_override/policy_disable_stdio.rego b/src/confcom/samples/aci/default_variables_override/policy_disable_stdio.rego index 97bd7e09205..9177bee6ae8 100644 --- a/src/confcom/samples/aci/default_variables_override/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/default_variables_override/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/default_variables_override/policy_fragment.rego b/src/confcom/samples/aci/default_variables_override/policy_fragment.rego index 7084aab34f5..da895107e92 100644 --- a/src/confcom/samples/aci/default_variables_override/policy_fragment.rego +++ b/src/confcom/samples/aci/default_variables_override/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/environment_variables/policy.rego b/src/confcom/samples/aci/environment_variables/policy.rego index 9fbd44fb847..6966ac35d00 100644 --- a/src/confcom/samples/aci/environment_variables/policy.rego +++ b/src/confcom/samples/aci/environment_variables/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/environment_variables/policy_debug.rego b/src/confcom/samples/aci/environment_variables/policy_debug.rego index 5b576350f14..79a435f36ef 100644 --- a/src/confcom/samples/aci/environment_variables/policy_debug.rego +++ b/src/confcom/samples/aci/environment_variables/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/environment_variables/policy_disable_stdio.rego b/src/confcom/samples/aci/environment_variables/policy_disable_stdio.rego index e605639b95b..1b3bf3399eb 100644 --- a/src/confcom/samples/aci/environment_variables/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/environment_variables/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/environment_variables/policy_fragment.rego b/src/confcom/samples/aci/environment_variables/policy_fragment.rego index a85279359a7..f3c958b6d44 100644 --- a/src/confcom/samples/aci/environment_variables/policy_fragment.rego +++ b/src/confcom/samples/aci/environment_variables/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/minimal/policy.rego b/src/confcom/samples/aci/minimal/policy.rego index 54041c457f3..721ef3581f3 100644 --- a/src/confcom/samples/aci/minimal/policy.rego +++ b/src/confcom/samples/aci/minimal/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/minimal/policy_debug.rego b/src/confcom/samples/aci/minimal/policy_debug.rego index 2fe79cc3aa8..f33fa7b46c8 100644 --- a/src/confcom/samples/aci/minimal/policy_debug.rego +++ b/src/confcom/samples/aci/minimal/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/minimal/policy_disable_stdio.rego b/src/confcom/samples/aci/minimal/policy_disable_stdio.rego index 2eca9f7c45e..d4f5c46ce0c 100644 --- a/src/confcom/samples/aci/minimal/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/minimal/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/minimal/policy_fragment.rego b/src/confcom/samples/aci/minimal/policy_fragment.rego index 0b8d0c95bde..d9ea7a4f5a6 100644 --- a/src/confcom/samples/aci/minimal/policy_fragment.rego +++ b/src/confcom/samples/aci/minimal/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/multi_container_groups/policy.rego b/src/confcom/samples/aci/multi_container_groups/policy.rego index 17c26c09076..67de04a0285 100644 --- a/src/confcom/samples/aci/multi_container_groups/policy.rego +++ b/src/confcom/samples/aci/multi_container_groups/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] @@ -64,7 +64,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/multi_container_groups/policy_debug.rego b/src/confcom/samples/aci/multi_container_groups/policy_debug.rego index d9135f99cb9..7ddb75b3742 100644 --- a/src/confcom/samples/aci/multi_container_groups/policy_debug.rego +++ b/src/confcom/samples/aci/multi_container_groups/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] @@ -64,7 +64,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/multi_container_groups/policy_disable_stdio.rego b/src/confcom/samples/aci/multi_container_groups/policy_disable_stdio.rego index 18595d41158..c7e0650713b 100644 --- a/src/confcom/samples/aci/multi_container_groups/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/multi_container_groups/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] @@ -64,7 +64,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/multi_containers/policy.rego b/src/confcom/samples/aci/multi_containers/policy.rego index 0453be8480a..e9ea916e0a8 100644 --- a/src/confcom/samples/aci/multi_containers/policy.rego +++ b/src/confcom/samples/aci/multi_containers/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/multi_containers/policy_debug.rego b/src/confcom/samples/aci/multi_containers/policy_debug.rego index 572b61ae2b7..36217c9ac09 100644 --- a/src/confcom/samples/aci/multi_containers/policy_debug.rego +++ b/src/confcom/samples/aci/multi_containers/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/multi_containers/policy_disable_stdio.rego b/src/confcom/samples/aci/multi_containers/policy_disable_stdio.rego index 250d409b948..19c2177c1ce 100644 --- a/src/confcom/samples/aci/multi_containers/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/multi_containers/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/multi_containers/policy_fragment.rego b/src/confcom/samples/aci/multi_containers/policy_fragment.rego index df44653b377..e1d6b484c42 100644 --- a/src/confcom/samples/aci/multi_containers/policy_fragment.rego +++ b/src/confcom/samples/aci/multi_containers/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/security_context_capabilities_add/policy.rego b/src/confcom/samples/aci/security_context_capabilities_add/policy.rego index 44fd8c4ddc2..e17f515f228 100644 --- a/src/confcom/samples/aci/security_context_capabilities_add/policy.rego +++ b/src/confcom/samples/aci/security_context_capabilities_add/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_capabilities_add/policy_debug.rego b/src/confcom/samples/aci/security_context_capabilities_add/policy_debug.rego index c8fe9f15c8d..be2655f5834 100644 --- a/src/confcom/samples/aci/security_context_capabilities_add/policy_debug.rego +++ b/src/confcom/samples/aci/security_context_capabilities_add/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_capabilities_add/policy_disable_stdio.rego b/src/confcom/samples/aci/security_context_capabilities_add/policy_disable_stdio.rego index c8394d1c6a1..a5188b24c04 100644 --- a/src/confcom/samples/aci/security_context_capabilities_add/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/security_context_capabilities_add/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_capabilities_add/policy_fragment.rego b/src/confcom/samples/aci/security_context_capabilities_add/policy_fragment.rego index 8a1c9b9b249..38027274a76 100644 --- a/src/confcom/samples/aci/security_context_capabilities_add/policy_fragment.rego +++ b/src/confcom/samples/aci/security_context_capabilities_add/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/security_context_capabilities_add_drop/policy.rego b/src/confcom/samples/aci/security_context_capabilities_add_drop/policy.rego index cd054883fdd..db0eb992c57 100644 --- a/src/confcom/samples/aci/security_context_capabilities_add_drop/policy.rego +++ b/src/confcom/samples/aci/security_context_capabilities_add_drop/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_capabilities_add_drop/policy_debug.rego b/src/confcom/samples/aci/security_context_capabilities_add_drop/policy_debug.rego index cdd3be48d18..cbfd9699780 100644 --- a/src/confcom/samples/aci/security_context_capabilities_add_drop/policy_debug.rego +++ b/src/confcom/samples/aci/security_context_capabilities_add_drop/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_capabilities_add_drop/policy_disable_stdio.rego b/src/confcom/samples/aci/security_context_capabilities_add_drop/policy_disable_stdio.rego index e6c787e3e77..285be86a07d 100644 --- a/src/confcom/samples/aci/security_context_capabilities_add_drop/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/security_context_capabilities_add_drop/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_capabilities_add_drop/policy_fragment.rego b/src/confcom/samples/aci/security_context_capabilities_add_drop/policy_fragment.rego index c13e6c775a6..27ccf902d93 100644 --- a/src/confcom/samples/aci/security_context_capabilities_add_drop/policy_fragment.rego +++ b/src/confcom/samples/aci/security_context_capabilities_add_drop/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/security_context_capabilities_drop/policy.rego b/src/confcom/samples/aci/security_context_capabilities_drop/policy.rego index 5ede94c7b9d..c9e88f85555 100644 --- a/src/confcom/samples/aci/security_context_capabilities_drop/policy.rego +++ b/src/confcom/samples/aci/security_context_capabilities_drop/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_capabilities_drop/policy_debug.rego b/src/confcom/samples/aci/security_context_capabilities_drop/policy_debug.rego index 254558dfc8a..bd1c6052a14 100644 --- a/src/confcom/samples/aci/security_context_capabilities_drop/policy_debug.rego +++ b/src/confcom/samples/aci/security_context_capabilities_drop/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_capabilities_drop/policy_disable_stdio.rego b/src/confcom/samples/aci/security_context_capabilities_drop/policy_disable_stdio.rego index 9a163b52fbb..34425ff5777 100644 --- a/src/confcom/samples/aci/security_context_capabilities_drop/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/security_context_capabilities_drop/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_capabilities_drop/policy_fragment.rego b/src/confcom/samples/aci/security_context_capabilities_drop/policy_fragment.rego index e5efdd8584d..580ae543b37 100644 --- a/src/confcom/samples/aci/security_context_capabilities_drop/policy_fragment.rego +++ b/src/confcom/samples/aci/security_context_capabilities_drop/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/security_context_run_as_group/policy.rego b/src/confcom/samples/aci/security_context_run_as_group/policy.rego index 98bc85c201e..93f30fa1e74 100644 --- a/src/confcom/samples/aci/security_context_run_as_group/policy.rego +++ b/src/confcom/samples/aci/security_context_run_as_group/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_run_as_group/policy_debug.rego b/src/confcom/samples/aci/security_context_run_as_group/policy_debug.rego index 31f6c9c720b..9a618bafc91 100644 --- a/src/confcom/samples/aci/security_context_run_as_group/policy_debug.rego +++ b/src/confcom/samples/aci/security_context_run_as_group/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_run_as_group/policy_disable_stdio.rego b/src/confcom/samples/aci/security_context_run_as_group/policy_disable_stdio.rego index c14ec8e16dd..23fac5e69db 100644 --- a/src/confcom/samples/aci/security_context_run_as_group/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/security_context_run_as_group/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_run_as_group/policy_fragment.rego b/src/confcom/samples/aci/security_context_run_as_group/policy_fragment.rego index ebf6699020f..43322bb43ac 100644 --- a/src/confcom/samples/aci/security_context_run_as_group/policy_fragment.rego +++ b/src/confcom/samples/aci/security_context_run_as_group/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/security_context_run_as_user/policy.rego b/src/confcom/samples/aci/security_context_run_as_user/policy.rego index ebacb0f5c24..e16fb4563d0 100644 --- a/src/confcom/samples/aci/security_context_run_as_user/policy.rego +++ b/src/confcom/samples/aci/security_context_run_as_user/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_run_as_user/policy_debug.rego b/src/confcom/samples/aci/security_context_run_as_user/policy_debug.rego index 12d8171cfc3..6e31e8f99ef 100644 --- a/src/confcom/samples/aci/security_context_run_as_user/policy_debug.rego +++ b/src/confcom/samples/aci/security_context_run_as_user/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_run_as_user/policy_disable_stdio.rego b/src/confcom/samples/aci/security_context_run_as_user/policy_disable_stdio.rego index 4879bf1ddb5..28c1efee0c1 100644 --- a/src/confcom/samples/aci/security_context_run_as_user/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/security_context_run_as_user/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/security_context_run_as_user/policy_fragment.rego b/src/confcom/samples/aci/security_context_run_as_user/policy_fragment.rego index db67962c52e..e7098c289ce 100644 --- a/src/confcom/samples/aci/security_context_run_as_user/policy_fragment.rego +++ b/src/confcom/samples/aci/security_context_run_as_user/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/variables/policy.rego b/src/confcom/samples/aci/variables/policy.rego index 54041c457f3..721ef3581f3 100644 --- a/src/confcom/samples/aci/variables/policy.rego +++ b/src/confcom/samples/aci/variables/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/variables/policy_debug.rego b/src/confcom/samples/aci/variables/policy_debug.rego index 2fe79cc3aa8..f33fa7b46c8 100644 --- a/src/confcom/samples/aci/variables/policy_debug.rego +++ b/src/confcom/samples/aci/variables/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/variables/policy_disable_stdio.rego b/src/confcom/samples/aci/variables/policy_disable_stdio.rego index 2eca9f7c45e..d4f5c46ce0c 100644 --- a/src/confcom/samples/aci/variables/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/variables/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/variables/policy_fragment.rego b/src/confcom/samples/aci/variables/policy_fragment.rego index 0b8d0c95bde..d9ea7a4f5a6 100644 --- a/src/confcom/samples/aci/variables/policy_fragment.rego +++ b/src/confcom/samples/aci/variables/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/volume_mount_secret/policy.rego b/src/confcom/samples/aci/volume_mount_secret/policy.rego index 96480eb9632..b5a639bb912 100644 --- a/src/confcom/samples/aci/volume_mount_secret/policy.rego +++ b/src/confcom/samples/aci/volume_mount_secret/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/volume_mount_secret/policy_debug.rego b/src/confcom/samples/aci/volume_mount_secret/policy_debug.rego index 7ac2ee888d7..24215106d3f 100644 --- a/src/confcom/samples/aci/volume_mount_secret/policy_debug.rego +++ b/src/confcom/samples/aci/volume_mount_secret/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/volume_mount_secret/policy_disable_stdio.rego b/src/confcom/samples/aci/volume_mount_secret/policy_disable_stdio.rego index 37d5d864f4c..3f5ce0efda4 100644 --- a/src/confcom/samples/aci/volume_mount_secret/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/volume_mount_secret/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/volume_mount_secret/policy_fragment.rego b/src/confcom/samples/aci/volume_mount_secret/policy_fragment.rego index f70c8d32bf7..bb5bf4e1743 100644 --- a/src/confcom/samples/aci/volume_mount_secret/policy_fragment.rego +++ b/src/confcom/samples/aci/volume_mount_secret/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/aci/volume_mounts/policy.rego b/src/confcom/samples/aci/volume_mounts/policy.rego index a1bd4e08d6b..273b195b4d9 100644 --- a/src/confcom/samples/aci/volume_mounts/policy.rego +++ b/src/confcom/samples/aci/volume_mounts/policy.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/volume_mounts/policy_debug.rego b/src/confcom/samples/aci/volume_mounts/policy_debug.rego index d7d49129f8a..ebe8d8cff89 100644 --- a/src/confcom/samples/aci/volume_mounts/policy_debug.rego +++ b/src/confcom/samples/aci/volume_mounts/policy_debug.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/volume_mounts/policy_disable_stdio.rego b/src/confcom/samples/aci/volume_mounts/policy_disable_stdio.rego index 4c4418eb03e..71223a5d727 100644 --- a/src/confcom/samples/aci/volume_mounts/policy_disable_stdio.rego +++ b/src/confcom/samples/aci/volume_mounts/policy_disable_stdio.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] diff --git a/src/confcom/samples/aci/volume_mounts/policy_fragment.rego b/src/confcom/samples/aci/volume_mounts/policy_fragment.rego index c91dc53d559..80286bf873a 100644 --- a/src/confcom/samples/aci/volume_mounts/policy_fragment.rego +++ b/src/confcom/samples/aci/volume_mounts/policy_fragment.rego @@ -14,7 +14,7 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" }, { "feed": "mcr.microsoft.com/acc/samples/aci/helloworld", diff --git a/src/confcom/samples/fragments/fragment.rego b/src/confcom/samples/fragments/fragment.rego index 7c470c0c41a..a9e90546022 100644 --- a/src/confcom/samples/fragments/fragment.rego +++ b/src/confcom/samples/fragments/fragment.rego @@ -11,195 +11,8 @@ fragments := [ "fragments" ], "issuer": "did:x509:0:sha256:I__iuL25oXEVFdTP_aBLx_eT1RPHbCQ_ECBQfYZpt9s::eku:1.3.6.1.4.1.311.76.59.1.3", - "minimum_svn": "1" + "minimum_svn": "4" } ] -containers := [ - { - "allow_elevated": false, - "allow_stdio_access": true, - "capabilities": { - "ambient": [], - "bounding": [ - "CAP_AUDIT_WRITE", - "CAP_CHOWN", - "CAP_DAC_OVERRIDE", - "CAP_FOWNER", - "CAP_FSETID", - "CAP_KILL", - "CAP_MKNOD", - "CAP_NET_BIND_SERVICE", - "CAP_NET_RAW", - "CAP_SETFCAP", - "CAP_SETGID", - "CAP_SETPCAP", - "CAP_SETUID", - "CAP_SYS_CHROOT" - ], - "effective": [ - "CAP_AUDIT_WRITE", - "CAP_CHOWN", - "CAP_DAC_OVERRIDE", - "CAP_FOWNER", - "CAP_FSETID", - "CAP_KILL", - "CAP_MKNOD", - "CAP_NET_BIND_SERVICE", - "CAP_NET_RAW", - "CAP_SETFCAP", - "CAP_SETGID", - "CAP_SETPCAP", - "CAP_SETUID", - "CAP_SYS_CHROOT" - ], - "inheritable": [], - "permitted": [ - "CAP_AUDIT_WRITE", - "CAP_CHOWN", - "CAP_DAC_OVERRIDE", - "CAP_FOWNER", - "CAP_FSETID", - "CAP_KILL", - "CAP_MKNOD", - "CAP_NET_BIND_SERVICE", - "CAP_NET_RAW", - "CAP_SETFCAP", - "CAP_SETGID", - "CAP_SETPCAP", - "CAP_SETUID", - "CAP_SYS_CHROOT" - ] - }, - "command": [ - "python3", - "main.py" - ], - "env_rules": [ - { - "pattern": "PATH=/customized/path/value", - "required": false, - "strategy": "string" - }, - { - "pattern": "TEST_REGEXP_ENV=test_regexp_env(.*)", - "required": false, - "strategy": "re2" - }, - { - "pattern": "PYTHONUNBUFFERED=1", - "required": false, - "strategy": "string" - }, - { - "pattern": "TERM=xterm", - "required": false, - "strategy": "string" - }, - { - "pattern": "(?i)(FABRIC)_.+=.+", - "required": false, - "strategy": "re2" - }, - { - "pattern": "HOSTNAME=.+", - "required": false, - "strategy": "re2" - }, - { - "pattern": "T(E)?MP=.+", - "required": false, - "strategy": "re2" - }, - { - "pattern": "FabricPackageFileName=.+", - "required": false, - "strategy": "re2" - }, - { - "pattern": "HostedServiceName=.+", - "required": false, - "strategy": "re2" - }, - { - "pattern": "IDENTITY_API_VERSION=.+", - "required": false, - "strategy": "re2" - }, - { - "pattern": "IDENTITY_HEADER=.+", - "required": false, - "strategy": "re2" - }, - { - "pattern": "IDENTITY_SERVER_THUMBPRINT=.+", - "required": false, - "strategy": "re2" - }, - { - "pattern": "azurecontainerinstance_restarted_by=.+", - "required": false, - "strategy": "re2" - } - ], - "exec_processes": [ - { - "command": [ - "echo", - "Hello World" - ], - "signals": [] - } - ], - "id": "mcr.microsoft.com/acc/samples/aci/helloworld:2.9", - "layers": [ - "4e74440c7b0e6e6c1cc9e6eb9b779e1ffde807122ed8a16bb0422a1d64fd5aa8", - "4cf856bcde8e1fa71f57d2218e21dd7c1a6a12c6d930d2bdb4bdb13a46fed9e4", - "41a52f45506177737caec5d57fe6160b6c8942dcac1bc7834fc0e94e62ff6b4d", - "b8ea8eae7795453b5e3dcfafe3f11fb2d68efb1062308e4d2411d44dd19fa97c", - "a0df1939f552483286c45204e7f583c9a6146963a79556fe22578d7b7e63e7a1", - "3ccbd6b119e951f3f2586339e9d10168b064a5852fd87cfae94af47a89f4d6c6", - "8348c9d4357db6a600aa4c5116ed9755a230d274096706a7d214c02105d0b256" - ], - "mounts": [ - { - "destination": "/mount/azurefile", - "options": [ - "rbind", - "rshared", - "ro" - ], - "source": "sandbox:///tmp/atlas/azureFileVolume/.+", - "type": "bind" - }, - { - "destination": "/etc/resolv.conf", - "options": [ - "rbind", - "rshared", - "rw" - ], - "source": "sandbox:///tmp/atlas/resolvconf/.+", - "type": "bind" - } - ], - "name": "my-image", - "no_new_privileges": false, - "seccomp_profile_sha256": "", - "signals": [], - "user": { - "group_idnames": [ - { - "pattern": "", - "strategy": "any" - } - ], - "umask": "0022", - "user_idname": { - "pattern": "", - "strategy": "any" - } - }, - "working_dir": "/app" - } -] +containers := [{"allow_elevated":false,"allow_stdio_access":true,"capabilities":{"ambient":[],"bounding":["CAP_AUDIT_WRITE","CAP_CHOWN","CAP_DAC_OVERRIDE","CAP_FOWNER","CAP_FSETID","CAP_KILL","CAP_MKNOD","CAP_NET_BIND_SERVICE","CAP_NET_RAW","CAP_SETFCAP","CAP_SETGID","CAP_SETPCAP","CAP_SETUID","CAP_SYS_CHROOT"],"effective":["CAP_AUDIT_WRITE","CAP_CHOWN","CAP_DAC_OVERRIDE","CAP_FOWNER","CAP_FSETID","CAP_KILL","CAP_MKNOD","CAP_NET_BIND_SERVICE","CAP_NET_RAW","CAP_SETFCAP","CAP_SETGID","CAP_SETPCAP","CAP_SETUID","CAP_SYS_CHROOT"],"inheritable":[],"permitted":["CAP_AUDIT_WRITE","CAP_CHOWN","CAP_DAC_OVERRIDE","CAP_FOWNER","CAP_FSETID","CAP_KILL","CAP_MKNOD","CAP_NET_BIND_SERVICE","CAP_NET_RAW","CAP_SETFCAP","CAP_SETGID","CAP_SETPCAP","CAP_SETUID","CAP_SYS_CHROOT"]},"command":["python3","main.py"],"env_rules":[{"pattern":"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","required":false,"strategy":"string"},{"pattern":"PYTHONUNBUFFERED=1","required":false,"strategy":"string"},{"pattern":"TERM=xterm","required":false,"strategy":"string"},{"pattern":"(?i)(FABRIC)_.+=.+","required":false,"strategy":"re2"},{"pattern":"HOSTNAME=.+","required":false,"strategy":"re2"},{"pattern":"T(E)?MP=.+","required":false,"strategy":"re2"},{"pattern":"FabricPackageFileName=.+","required":false,"strategy":"re2"},{"pattern":"HostedServiceName=.+","required":false,"strategy":"re2"},{"pattern":"IDENTITY_API_VERSION=.+","required":false,"strategy":"re2"},{"pattern":"IDENTITY_HEADER=.+","required":false,"strategy":"re2"},{"pattern":"IDENTITY_SERVER_THUMBPRINT=.+","required":false,"strategy":"re2"},{"pattern":"azurecontainerinstance_restarted_by=.+","required":false,"strategy":"re2"}],"exec_processes":[],"id":"mcr.microsoft.com/acc/samples/aci/helloworld:2.9","layers":["4e74440c7b0e6e6c1cc9e6eb9b779e1ffde807122ed8a16bb0422a1d64fd5aa8","4cf856bcde8e1fa71f57d2218e21dd7c1a6a12c6d930d2bdb4bdb13a46fed9e4","41a52f45506177737caec5d57fe6160b6c8942dcac1bc7834fc0e94e62ff6b4d","b8ea8eae7795453b5e3dcfafe3f11fb2d68efb1062308e4d2411d44dd19fa97c","a0df1939f552483286c45204e7f583c9a6146963a79556fe22578d7b7e63e7a1","3ccbd6b119e951f3f2586339e9d10168b064a5852fd87cfae94af47a89f4d6c6","8348c9d4357db6a600aa4c5116ed9755a230d274096706a7d214c02105d0b256"],"mounts":[{"destination":"/etc/resolv.conf","options":["rbind","rshared","rw"],"source":"sandbox:///tmp/atlas/resolvconf/.+","type":"bind"}],"name":"my-image","no_new_privileges":false,"seccomp_profile_sha256":"","signals":[],"user":{"group_idnames":[{"pattern":"","strategy":"any"}],"umask":"0022","user_idname":{"pattern":"","strategy":"any"}},"working_dir":"/app"}] diff --git a/src/confcom/samples/fragments/fragment.rego.cose b/src/confcom/samples/fragments/fragment.rego.cose index d7bff615de0..dcb24549c3e 100644 Binary files a/src/confcom/samples/fragments/fragment.rego.cose and b/src/confcom/samples/fragments/fragment.rego.cose differ