Skip to content

Commit 0832f11

Browse files
authored
fix(e2e): add uv-managed python binary glob to forward proxy L7 test (#686)
The base sandbox image installs Python via uv at /sandbox/.uv/python/*/bin/python*, but the proxy resolves binary identity via /proc/PID/exe (the real path, not the symlink). The test policy only listed /usr/bin/python* and /usr/local/bin/python*, so OPA denied the connection at L4 before L7 evaluation could run. Co-authored-by: John Myers <johntmyers@users.noreply.github.com>
1 parent c1dd81e commit 0832f11

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

e2e/rust/tests/forward_proxy_l7_bypass.rs

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -156,6 +156,7 @@ network_policies:
156156
- path: /usr/bin/curl
157157
- path: /usr/bin/python*
158158
- path: /usr/local/bin/python*
159+
- path: /sandbox/.uv/python/*/bin/python*
159160
"#
160161
);
161162
file.write_all(policy.as_bytes())

0 commit comments

Comments
 (0)