Tonis Tiigi
25db0fb050
tests: verify exec traffic is policy-checked in caps proxy test
...
Extend testBuildPolicyCapsProxy so that instead of only checking that
the network proxy was enabled, the build runs a command that makes an
HTTP request to a local test server. The policy denies that URL as an
HTTP source, so the test now verifies that exec traffic actually flows
through the proxy and is subject to source policy, including the deny
message and DENY decision in the build output.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-06-10 08:58:48 -07:00
Tonis Tiigi and CrazyMax
4da04e3bf4
policy: enable proxy network from source policy caps
...
Evaluate source policy caps before solve requests so policies can enable
BuildKit proxy networking. Policy can return caps {"exec.proxy": true}
during the caps request to enable proxy network
support for the solve.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-06-10 15:04:23 +02:00
CrazyMax
720f91fdd4
gitutil: migrate to BuildKit GitCLI API
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-04-09 14:57:38 +02:00
CrazyMax
766592b2d1
tests: add remote multi-node worker
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2026-03-12 11:37:08 +01:00
Tonis Tiigi
b62fc30524
build: resolve policy files from context state and unified FS
...
Support remote context policy files via resolved context state and cwd:// override.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-23 16:22:19 -08:00
Tonis Tiigi
9f59d5b789
policy: add progress vertex error integration test
...
Refactor policy error unit tests to table-driven subtests with slug names.
Add rawjson integration coverage to verify policy vertex captures DENY build
errors in progress output.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-02-19 18:13:58 -08:00
Tonis Tiigi
9f1daffb32
policy: implement policy support for bake
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:34:23 -08:00
Tonis Tiigi
6f9a1cfb17
tests: add git based policy tests
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:34:15 -08:00
Tonis Tiigi
6d80e701f6
tests: add tests checking combinations of --policy flag
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:34:09 -08:00
Tonis Tiigi
4b4f2aa682
tests: add http policy integration tests
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:33:49 -08:00
Tonis Tiigi
e5116c1555
tests: update policy tests matrix to require modern buildkit
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:10:35 -08:00
Tonis Tiigi
02719d045c
tests: add image and env based policy build tests
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:10:35 -08:00
Tonis Tiigi
ae86c584b4
tests: add policy flag integration test
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com >
2026-01-14 09:10:35 -08:00
Tonis Tiigi