Skip to content

CWCOW: Enforce registry entries on containers#2611

Draft
MahatiC wants to merge 1 commit intomicrosoft:mainfrom
MahatiC:registry-enforcement
Draft

CWCOW: Enforce registry entries on containers#2611
MahatiC wants to merge 1 commit intomicrosoft:mainfrom
MahatiC:registry-enforcement

Conversation

@MahatiC
Copy link
Member

@MahatiC MahatiC commented Feb 27, 2026

This PR implements registry enforcement to control what registry entries are allowed to be set inside a container.

  • There is a default_registry_values.go which stores the default registry entries that are necessary. As of now, it has one entry which is needed for ServerCore images as noted here
  • Adds a test annotation for internal testing of registry entries on containers
  • A new enforcement point is added to validate this and corresponding framework changes are also added
  • Unit tests for the new enforcement point

@MahatiC MahatiC force-pushed the registry-enforcement branch from 6352c8b to 81abd32 Compare February 27, 2026 16:00
Signed-off-by: Mahati Chamarthy <mahati.chamarthy@gmail.com>
@MahatiC MahatiC force-pushed the registry-enforcement branch from 81abd32 to 8504977 Compare February 27, 2026 16:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant