| Agent Type | Minimum Version Required | |-------------|--------------------------| | Linux (systemd) | copc-agent 2.0.1+ | | Windows | copc-win 2.0.0+ | | Kubernetes admission controller | copc-k8s v1.0+ (new) | | Envoy external auth filter | copc-envoy 2.0+ |
rules: - action: allow destPort: 443 - action: deny copc updated
copc audit --recursive /etc/copc/policies/ The CLI includes a --compat=v1 flag to simulate v2.0 validation without enforcement. Phase 2 – Update Authoring Tools You need copc-builder v2.0+ (download from the official registry). Old v1.5 builders will produce containers that v2.0 agents reject. Phase 3 – Refactor Rules for Priority Replace ruleOrder: "firstMatch" with explicit priorities. Example change: | Agent Type | Minimum Version Required |
| Metric | v1.2 | v2.0 (updated) | Improvement | |--------|------|----------------|--------------| | Policy parsing (500 rules) | 210 ms | 78 ms | 62% faster | | Signature verification | RSA: 45 ms | Ed25519: 8 ms | 5.6x faster | | Container size (compressed) | 124 KB | 137 KB (due to metadata) | +10% (acceptable) | | Concurrent policy evaluations | 1,200/sec | 8,400/sec | 7x throughput | Phase 3 – Refactor Rules for Priority Replace