Classic confinement request for STACKIT CLI

Hi @Philipp

I’m not fully convinced that the CLI falls under the “public cloud agents” category. It looks to me something more intended to run in cloud instances to perform the required instance management/maintenance tasks. However, maybe someone with a bit more context than me from when the supported categories were defined can comment here.

Anyway, afaik there are other public cloud CLIs running in strict mode with no issues. Regarding your snap requirements:

  • Reading/writing arbitrary files
    • JSON request payloads: I would expect to find them in home directory (it may also be a restriction of the snap that should not harm the usability a lot). You can get access to it via home interface
    • user set configurations: they would be placed in a predefined directory. You can ask for access to this directory via personal-files or system-files interfaces depending on the concrete location.
  • accessing the OS keychain to store credentials: you may access it via portals as discussed here
  • using the network: you can easily access the network by plugging the network interface

Thanks!