Sascha Grunert af09bec1f4 cri-api: Add the security profile RPCs and the OCI profile type ...

Add the CRI surface of KEP-6061: the OCI profile type with oci_ref and
base_profile in SecurityProfile, the SecurityProfileBase message, the
PullSecurityProfile, ListSecurityProfiles, and RemoveSecurityProfile
ImageService RPCs with SecurityProfileKind, the seccomp_profile_oci
runtime feature, and the SecurityProfileInvalid well-known error for
permanent pull failures. The kubelet owns the lifecycle of pulled
profiles through the list and remove RPCs. The remote client, the fake
image service, the kubelet's instrumented service, and the e2e CRI
proxies implement the new methods; the kubelet does not call them yet.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>

2026-10-23 13:04:35 +02:00

..

endpoint.go

feat: Add cri proxy for e2e_node

2024-10-16 20:53:28 +08:00

proxy_image_service.go

cri-api: Add the security profile RPCs and the OCI profile type

2026-10-23 13:04:35 +02:00

proxy_runtime_service.go

cri-api: Add pod checkpoint and restore RPCs

2026-07-22 18:31:02 +01:00