From 01a57c545354ea2f544c50a0897a583bd2721008 Mon Sep 17 00:00:00 2001 From: John Myers Date: Mon, 30 Mar 2026 11:44:52 -0700 Subject: [PATCH] fix(e2e): add uv-managed python binary glob to forward proxy L7 test The base sandbox image installs Python via uv at /sandbox/.uv/python/*/bin/python*, but the proxy resolves binary identity via /proc/PID/exe (the real path, not the symlink). The test policy only listed /usr/bin/python* and /usr/local/bin/python*, so OPA denied the connection at L4 before L7 evaluation could run. --- e2e/rust/tests/forward_proxy_l7_bypass.rs | 1 + 1 file changed, 1 insertion(+) diff --git a/e2e/rust/tests/forward_proxy_l7_bypass.rs b/e2e/rust/tests/forward_proxy_l7_bypass.rs index 89ecf2cd..c3ae584b 100644 --- a/e2e/rust/tests/forward_proxy_l7_bypass.rs +++ b/e2e/rust/tests/forward_proxy_l7_bypass.rs @@ -156,6 +156,7 @@ network_policies: - path: /usr/bin/curl - path: /usr/bin/python* - path: /usr/local/bin/python* + - path: /sandbox/.uv/python/*/bin/python* "# ); file.write_all(policy.as_bytes())