Skip to content

feat(core): add CDI policy resolver - #2775

Open
elezar wants to merge 1 commit into
mainfrom
1606-cdi-policy-core/elezar
Open

feat(core): add CDI policy resolver#2775
elezar wants to merge 1 commit into
mainfrom
1606-cdi-policy-core/elezar

Conversation

@elezar

@elezar elezar commented Aug 17, 2026

Copy link
Copy Markdown
Member

Summary

Add a portable, fail-closed CDI context resolver that turns validated CDI specs into policy-relevant device, mount, and group requirements. This is the foundation of the stacked #1606 implementation.

Related Issue

Part of #1606.

Changes

  • Add the shared CDI context schema and Linux-only resolver dependency boundary.
  • Validate device-node types, paths, writable mounts, and supplemental GIDs.
  • Add resolver unit coverage using temporary CDI specifications.

Testing

  • mise run pre-commit passes
  • Unit tests added/updated
  • E2E tests added/updated (not applicable to this layer)

Checklist

  • Follows Conventional Commits
  • Commits are signed off (DCO)

@elezar
elezar requested review from a team, derekwaynecarr, mrunalp and sjenning as code owners August 17, 2026 13:02
@elezar
elezar force-pushed the 1606-cdi-policy-core/elezar branch 7 times, most recently from 664fd88 to 722e6d9 Compare August 18, 2026 11:04
Signed-off-by: Evan Lezar <elezar@nvidia.com>
@elezar
elezar force-pushed the 1606-cdi-policy-core/elezar branch from 722e6d9 to a81daf0 Compare August 18, 2026 12:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant