In some implementations, when a modification is made to a CNF package, management service 430 will determine whether the modification is permitted to be applied to the files in repository 411. In determining whether the modification is permitted, management service 430 may determine whether the user associated with the modification is permitted to make the modification, determine whether the modification is permitted based on one or more policy files associated with the CNF, or based on some other factor. In the example when the modification is not permitted, management service 430 may prevent the update to one or more files in repository 411. In contrast when the modification is permitted, management service 430 may permit the update to one or more files in repository 411. The update may be used to update one or more files, add one or more files, replace one or more files, or provide some other modification in association with one or more files for the CNF.

Here, in operational scenario 400, management service 430 identifies a modification, at step 1, to a file in a CNF package based on a pull from the CNF package, wherein the modification corresponds to deleting a file in repository 411. In response to identifying the modification, management service 430 may determine whether the modification is permitted and, when permitted, delete one or more files 425 from repository 411 at step 2. Once the files are removed the GitOps operator and update any live instances of the CNF based on the deletion of the one or more files.