Repository navigation

Add application-controlled security policies for kubeconfig exec plugins - #1930

Open

brendandburns with Copilot wants to merge 12 commits into

copilot/add-security-policy-support

Open

Add application-controlled security policies for kubeconfig exec plugins#1930
brendandburns with Copilot wants to merge 12 commits into
masterfrom
copilot/add-security-policy-support

Commits on Oct 6, 2026
- Initial plan
  Copilot
  authored
  53692ed
- Add application-controlled exec credential plugin policies
  
  Copilot
  and
  brendandburns
  authored
  8525843
- Harden exec allowlists against quoted commands and environment injection
  
  Copilot
  and
  brendandburns
  authored
  b270f4f
Commits on Oct 14, 2026
- Document exec policy defense-in-depth limits
  
  Copilot
  and
  brendandburns
  authored
  36876d0
Commits on Oct 16, 2026
- Match exec allowlist to kuberc command resolution
  
  Copilot
  and
  brendandburns
  authored
  6b8c21d
Commits on Oct 19, 2026
- Improve command validation logic in ExecCredentialPluginPolicy
  
  brendandburns
  and
  Copilot
  authored
  506e755
- Allow safe exec environment overrides
  
  Copilot
  and
  brendandburns
  authored
  0157b92
Commits on Oct 24, 2026
- Add additional environment variable checks
  
  brendandburns
  and
  Copilot
  authored
  72e7598
- Refactor command resolution logic with exception handling
  
  brendandburns
  and
  Copilot
  authored
  10dd249
- Prevent probes of unapproved explicit plugin paths
  
  Copilot
  and
  brendandburns
  authored
  f7bfc6b
- Add profiling environment variable checks
  
  brendandburns
  and
  Copilot
  authored
  53fbfcf
- Match resolved paths case-insensitively on Windows
  
  Copilot
  and
  brendandburns
  authored
  8a6b270