Skip to content

[release/v7.6] Add network isolation policy parameter to vPack pipeline - #26444

Merged
Travis Plunk (TravisEz13) merged 1 commit into
PowerShell:release/v7.6from
TravisEz13:backport/release/v7.6/26223-c6cbd41a6
Nov 13, 2025
Merged

Travis Plunk (TravisEz13) merged 1 commit into
PowerShell:release/v7.6from
TravisEz13:backport/release/v7.6/26223-c6cbd41a6

Conversation

@TravisEz13

@TravisEz13 Travis Plunk (TravisEz13) commented Nov 13, 2025 •

Copy link
Copy Markdown
Member

Backport of #26223 to release/v7.6

Triggered by Travis Plunk (@TravisEz13) on behalf of Travis Plunk (@TravisEz13)

Original CL Label: CL-BuildPackaging

/cc @PowerShell/powershell-maintainers

Impact

REQUIRED: Choose either Tooling Impact or Customer Impact (or both). At least one checkbox must be selected.

Tooling Impact

  • Required tooling change
  • Optional tooling change (include reasoning)

Optional tooling enhancement that allows build engineers to specify network isolation policies (KS4, R1, Netlock) for vPack builds. Default behavior remains unchanged (RS1). Enables more flexible build environment configuration for testing and security scenarios.

Customer Impact

  • Customer reported
  • Found internally

Regression

REQUIRED: Check exactly one box.

  • Yes
  • No

This is not a regression.

Testing

Verified by running the vPack pipeline with different network isolation policy values. The parameter is correctly propagated and used in Windows host configuration. Clean cherry-pick with no conflicts.

Risk

REQUIRED: Check exactly one box.

  • High
  • Medium
  • Low

Medium risk: Changes CI/CD pipeline configuration to add network isolation policy support. This is a parameter addition with a safe default (RS1), so existing builds will continue working unchanged. The change has been validated in master and previously backported to v7.4 and v7.5 without issues.

…26223)

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR backports network isolation policy parameter support to the release/v7.6 vPack pipeline, allowing build engineers to specify network isolation policies (KS4, R1, Netlock) with R1 as the default.

Key Changes:

  • Added netiso parameter with three allowed values (KS4, R1, Netlock) and R1 default
  • Configured WindowsHostVersion.Network featureFlag to use the network isolation policy

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@TravisEz13 Travis Plunk (TravisEz13) added the CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log label Nov 13, 2025
@TravisEz13
Travis Plunk (TravisEz13) merged commit ae7f849 into PowerShell:release/v7.6 Nov 13, 2025
@TravisEz13
Travis Plunk (TravisEz13) deleted the backport/release/v7.6/26223-c6cbd41a6 branch November 13, 2025 21:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants