Description
Kubernetes v1.36 introduced a new volume type that allows mounting OCI images directly as volumes (spec.volumes[].image). Currently, the policy controller only verifies signatures on container images (containers, initContainers, ephemeralContainers) and does not inspect volume definitions.
This means an unsigned or untrusted OCI image can be mounted into a pod via an image volume without any policy enforcement.
The controller should validate image references in spec.volumes[].image.reference against ClusterImagePolicy rules, the same way it already does for container images.
Description
Kubernetes v1.36 introduced a new volume type that allows mounting OCI images directly as volumes (spec.volumes[].image). Currently, the policy controller only verifies signatures on container images (containers, initContainers, ephemeralContainers) and does not inspect volume definitions.
This means an unsigned or untrusted OCI image can be mounted into a pod via an image volume without any policy enforcement.
The controller should validate image references in spec.volumes[].image.reference against ClusterImagePolicy rules, the same way it already does for container images.