Architecture · 05 of 19 · Definition to run

From a reviewed definition to a disposable run

The image is built and signed by the same pipeline as any application, so a run can only execute what was reviewed. The run itself is a claim that Clearance narrows and Crossplane renders.

From a reviewed definition to a disposable run Architecture in two zones: a durable zone where an agent definition merged in git triggers Glidepath to build, scan and sign an image pinned by digest, and an ephemeral zone where a trigger reaches Clearance, which checks policy against the definition and creates an AgentRun claim that Crossplane renders into a run namespace which pulls the signed image. DURABLE · GIT · REVIEWEDEPHEMERAL · CLAIMS · TTLON MERGESIGN + SCANDEFINITION + PROFILEIMAGE PULLEVENTCLAIMRENDERSCREATESAgent definitionYAML in gitGlidepathbuild · scan · signSigned imagepinned by digestTriggermanual · cron · alertClearancepolicy · narrow-onlyAgentRun claimephemeral XRCrossplanefunction-agentrunRun namespacesandbox · TTLLEGENDNewExists todayArtifactTriggerThe claim

Principle honored

Supply chain first: agent code is untrusted code. Images are signed by Glidepath (cosign, self-hosted Fulcio and Rekor) and referenced by digest, never by tag.

What changes

  • Admission verifies the signature (Kyverno verifyImages is already in the cluster).
  • Third-party agent images take the same path, and default to the hardened sandbox class where the cluster has one.
  • A run whose image is not on the signed path is rejected, not warned about.

Verify live

Try to run an unsigned image, and a tag instead of a digest. The XRD schema refuses the tag; admission has to refuse the unsigned image. Test the second one, not just the first.

Hangar · Autopilot