podvm: Allow policy file specification in container builds

Agent policy file can be specified as part of containerised
builds.

The build arg is DEFAULT_AGENT_POLICY_FILE and it takes a policy file
name kept under podvm/files/etc/kata-opa

Signed-off-by: Pradipta Banerjee <pradipta.banerjee@gmail.com>

podvm/Dockerfile.podvm_binaries

@@ -12,9 +12,14 @@ ARG PODVM_DISTRO=ubuntu
 ARG AA_KBC=offline_fs_kbc
 # If not provided, uses system architecture
 ARG ARCH
+#This is the name of the policy file under 
+#files/etc/kata-opa
+ARG DEFAULT_AGENT_POLICY_FILE=allow-all.rego
+
 ENV PODVM_DISTRO ${PODVM_DISTRO}
 ENV AA_KBC ${AA_KBC}
 ENV ARCH ${ARCH}
+ENV DEFAULT_AGENT_POLICY_FILE ${DEFAULT_AGENT_POLICY_FILE}
 
 COPY . /src/cloud-api-adaptor
 

podvm/Dockerfile.podvm_binaries.fedora

@@ -15,13 +15,17 @@ ARG GUEST_COMPONENTS_REPO
 ARG AA_KBC="offline_fs_kbc"
 # If not provided, uses system architecture
 ARG ARCH
+#This is the name of the policy file under
+#files/etc/kata-opa
+ARG DEFAULT_AGENT_POLICY_FILE=allow-all.rego
 
 ENV CLOUD_PROVIDER ${CLOUD_PROVIDER}
 ENV PODVM_DISTRO ${PODVM_DISTRO}
 ENV GUEST_COMPONENTS_VERSION ${GUEST_COMPONENTS_VERSION}
 ENV GUEST_COMPONENTS_REPO ${GUEST_COMPONENTS_REPO}
 ENV AA_KBC ${AA_KBC}
 ENV ARCH ${ARCH}
+ENV DEFAULT_AGENT_POLICY_FILE ${DEFAULT_AGENT_POLICY_FILE}
 
 # Set these as they are required in the Makefile
 ENV IMAGE_URL "none"

podvm/Dockerfile.podvm_binaries.rhel

@@ -12,9 +12,14 @@ ARG PODVM_DISTRO=rhel
 ARG AA_KBC="offline_fs_kbc"
 # If not provided, uses system architecture
 ARG ARCH
+#This is the name of the policy file under
+#files/etc/kata-opa
+ARG DEFAULT_AGENT_POLICY_FILE=allow-all.rego
+
 ENV PODVM_DISTRO ${PODVM_DISTRO}
 ENV AA_KBC ${AA_KBC}
 ENV ARCH ${ARCH}
+ENV DEFAULT_AGENT_POLICY_FILE ${DEFAULT_AGENT_POLICY_FILE}
 
 COPY . /src/cloud-api-adaptor