Commit Graph

  • f605097daa libs: Make mem-agent a member of libs workspace Ruoqing He 2025-08-25 14:30:37 +00:00
  • 7bb28d8da7 libs: Move mem-agent into src/libs Ruoqing He 2025-08-25 14:27:17 +00:00
  • f0e223c535 mem-agent: Rename mem-agent-lib to mem-agent Ruoqing He 2025-08-25 13:41:31 +00:00
  • d7176ffcc8 tests: k8s-sandbox-vcpus-allocation generated policy Dan Mihai 2025-10-17 20:46:12 +00:00
  • 25299bc2a9 tests: k8s-block-volume.bats generated policy Dan Mihai 2025-10-17 18:12:36 +00:00
  • 02a8ec0f63 tests: k8s-measured-rootfs auto generated policy Dan Mihai 2025-09-29 22:31:36 +00:00
  • 1ff8b066c6 Merge pull request #11941 from fidencio/topic/kata-deploy-add-missing-helm-docs Zvonko Kaiser 2025-10-21 16:04:55 -04:00
  • ebaecbd3d6 Merge pull request #11949 from microsoft/danmihai1/optional-secret-volume Dan Mihai 2025-10-21 12:27:13 -07:00
  • d01fa478ad Merge pull request #11948 from kata-containers/sprt/fix-go-download Aurélien Bombo 2025-10-21 14:00:09 -05:00
  • 89e976e413 Merge pull request #11955 from kata-containers/sprt/refresh-oidc-before-delete Aurélien Bombo 2025-10-21 13:52:24 -05:00
  • f11853ab33 tests: k8s-optional-empty-secret.bats policy Dan Mihai 2025-10-17 20:08:53 +00:00
  • 346e1c1db6 genpolicy: allow optional secret volumes Dan Mihai 2025-10-17 18:57:34 +00:00
  • 785afb1dec Merge pull request #11885 from kata-containers/sprt/block-dev-hostpath Aurélien Bombo 2025-10-21 09:38:27 -05:00
  • b7f542443e ci: Always refresh OIDC token before cluster deletion Aurélien Bombo 2025-10-21 09:28:30 -05:00
  • 552378cf1e helm: Add missing documentation Fabiano Fidêncio 2025-10-14 19:17:37 +02:00
  • 43455774ce Merge pull request #11939 from ldoktor/ocp-helm-sudo Greg Kurz 2025-10-21 16:12:41 +02:00
  • 93eef5b253 docs: Document behavior of procfs and sysfs mounts Aurélien Bombo 2025-10-03 13:25:54 -05:00
  • 033299e46d docs: Document behavior of BlockDevice hostPath volumes Aurélien Bombo 2025-10-03 12:49:26 -05:00
  • 22aa27ff5e tests: Install Go from reliable mirror Aurélien Bombo 2025-10-17 14:35:36 -05:00
  • af34308c83 gpu: remove version suffixes for imex and nscq Manuel Huber 2025-10-17 21:52:06 +00:00
  • 5038578fba ci.ocp: Install helm in local dir Lukáš Doktor 2025-10-15 12:10:32 +02:00
  • 1bacc72540 Add 'foo' to README.md sprt-patch-2 Aurélien Bombo 2025-10-17 14:23:59 -05:00
  • 947862f804 Merge pull request #11904 from manuelh-dev/mahuber/conf-rootfs-nv-guest-pull Steve Horsman 2025-10-17 16:08:05 +01:00
  • 94b6a1d43e Merge pull request #10664 from kevinzs2048/add-cca Steve Horsman 2025-10-17 14:38:34 +01:00
  • 4ad8c31b5a gpu: build nv rootfs with guest pull support Manuel Huber 2025-10-08 23:55:32 +00:00
  • edbb4b633c Merge pull request #11890 from microsoft/saulparedes/optional_initdata Aurélien Bombo 2025-10-16 11:04:57 -05:00
  • d5cb9764fd kata-types: use pretty TOML encoder for initdata Markus Rudy 2025-10-15 14:21:54 +02:00
  • 141070b388 Kata-deploy: Add kata-deploy set up for qemu-cca Kevin Zhao 2025-08-25 03:10:53 +00:00
  • af919686ab Kata-deploy: Add CCA firmware build support Kevin Zhao 2025-08-19 23:46:49 +08:00
  • 16e91bfb21 kata-deploy: Add support for Arm CCA Qemu build Kevin Zhao 2024-12-12 07:53:27 +00:00
  • c7d5f207f1 kata-deploy: support build confidential rootfs and initrd for CCA Seunguk Shin 2024-11-21 09:43:16 +00:00
  • 40dac78412 kata-deploy: support build confidential kernel and shim-v2 for CCA Seunguk Shin 2024-11-20 14:04:41 +00:00
  • bfa7f2486d runtime: Add Arm64 CCA confidential Guest Support Kevin Zhao 2024-08-14 19:09:03 +08:00
  • 9b086376a4 tests/k8s: Skip initdata tests on tdx stevenhorsman 2025-10-15 14:51:54 +01:00
  • 09149407fd tests/k8s: Delete k8s-initdata.bats stevenhorsman 2025-10-13 09:49:57 +01:00
  • bdc0a3cf19 tests/k8s: Add initdata variant of registry creds tests stevenhorsman 2025-10-07 16:24:51 +01:00
  • 7fbbd170ee tests/k8s: Add initdata variants of oci signature tests stevenhorsman 2025-10-06 19:00:24 +01:00
  • 90ad5cd884 tests/k8s: Refactor initdata annotation stevenhorsman 2025-10-07 16:08:57 +01:00
  • aa7e46b5ed tests: Check the multi-snapshotter situation on containerd Fabiano Fidêncio 2025-10-03 15:59:32 +02:00
  • 8221361915 gpu: Use variable to differentiate rootfs variants Manuel Huber 2025-10-09 20:54:54 +00:00
  • 88c333f2a6 agent: Fix race in tests calling LinuxContainer::new() Hyounggyu Choi 2025-10-13 13:39:23 +02:00
  • 8412af919d agent/netlink: Attempt to fix ARP and routes tests Hyounggyu Choi 2025-10-13 12:41:57 +02:00
  • 06ed957a45 virtcontainers: fix nydus cleanup on rootfs unmount Paul Meyer 2025-10-08 13:04:22 +02:00
  • 10f8ec0c20 cdi: Add Crate remove Github Hash Zvonko Kaiser 2025-10-09 15:33:06 +00:00
  • 3507b2038e Merge pull request #11936 from ldoktor/ocp-helm Greg Kurz 2025-10-14 18:22:28 +02:00
  • bdb0afc4e0 ci.ocp: Fix incorrectly quoted argument Lukáš Doktor 2025-08-01 08:19:08 +02:00
  • f891f340bc ci.ocp: Use helm to install kata Lukáš Doktor 2025-10-14 17:31:34 +02:00
  • 0c6fcde198 Merge pull request #11918 from fidencio/topic/builds-qemu-use-liburing-newer-than-2.2 Aurélien Bombo 2025-10-14 10:17:16 -05:00
  • 363701d767 Merge pull request #11915 from stevenhorsman/ibm-runner-followups-part-i Steve Horsman 2025-10-14 13:28:45 +01:00
  • 2ad81c4797 build: qemu: Fix cache logic Fabiano Fidêncio 2025-10-14 08:37:13 +02:00
  • 2f73e34e33 builds: qemu: Use a liburing newer than 2.2 Fabiano Fidêncio 2025-10-10 22:23:10 +02:00
  • 8ce714cf97 ci: Add protobuf-compiler dependencies stevenhorsman 2025-10-10 09:57:44 +01:00
  • b0b0038689 versions: Bump QEMU to 10.1.1 Fabiano Fidêncio 2025-10-10 22:04:58 +02:00
  • d46474cfc0 tests: Run apt-get update before installing a package Fabiano Fidêncio 2025-10-13 13:31:32 +02:00
  • ba7a5953c8 tests: k8s-policy-pod.bats: test unspecified initdata path Saul Paredes 2025-10-10 14:52:45 -07:00
  • 395f237fc2 tests: k8s: use default-initdata.toml when auto-generating policy Saul Paredes 2025-10-01 13:58:03 -07:00
  • dfd269eb87 genpolicy: take path to initdata from command line if provided Saul Paredes 2025-09-26 16:54:30 -07:00
  • fb43d3419f build: Fix nvidia kernel breakage Fabiano Fidêncio 2025-10-13 16:30:56 +02:00
  • 8b06f3d95d Merge pull request #11905 from Apokleos/coldplug-scsidev Fupan Li 2025-10-11 16:11:39 +08:00
  • 5acb6d8e13 Merge pull request #11863 from lifupan/fupan_blk_remove Xuewei Niu 2025-10-11 10:31:48 +08:00
  • ff973a95c8 Merge pull request #11916 from zvonkok/fix-kernel-module-signing Aurélien Bombo 2025-10-10 17:17:08 -05:00
  • b00013c717 kernel: Add KBUILD_SIGN_PIN pass through Zvonko Kaiser 2025-10-10 16:57:52 +00:00
  • 37bd5e3c9d gpu: Add kernel CONFIG check Zvonko Kaiser 2025-10-10 16:01:53 +00:00
  • e782d1ad50 ci: k8s: Test experimental_force_guest_pull Fabiano Fidêncio 2025-10-08 15:51:00 +02:00
  • 1bc89d09ae tests: Consider SNAPSHOTTER in the cluster name Fabiano Fidêncio 2025-10-09 00:21:50 +02:00
  • 496e255ea2 build: Fix KBUILD_SIGN_PIN usage Fabiano Fidêncio 2025-10-10 09:57:10 +02:00
  • 5ae891ab46 versions: bump opa 1.6.0 -> 1.9.0 Paul Meyer 2025-10-09 11:45:24 +02:00
  • a570fdc0fd Merge pull request #11909 from kata-containers/ibm-runners-test Steve Horsman 2025-10-10 09:42:53 +01:00
  • 8dcd91cf5f ci: Enable new ibm runners stevenhorsman 2025-10-09 13:05:29 +01:00
  • 06a3bbdd44 ci: k8s: coco: Add "Report tests" step Fabiano Fidêncio 2025-10-10 09:42:52 +02:00
  • a1f90fe350 tests: k8s: Unify k8s TEE tests Fabiano Fidêncio 2025-10-08 12:47:53 +02:00
  • 4c386b51d9 runtime-rs: Add support for handling virtio-scsi devices Alex Lyn 2025-10-10 11:31:04 +08:00
  • 4002a91452 runtime-rs: ad the block device hot unplug for clh Fupan Li 2025-09-29 10:23:54 +08:00
  • afbec780a9 Merge pull request #11903 from zvonkok/ppcie Zvonko Kaiser 2025-10-09 21:06:41 -04:00
  • a3a45429f6 Merge pull request #11865 from microsoft/danmihai1/nested-configmap-secret Aurélien Bombo 2025-10-09 11:33:50 -05:00
  • b42ef09ffb Merge pull request #11888 from spuzirev/main Alex Lyn 2025-10-09 20:21:32 +08:00
  • 2a43bf37ed Merge pull request #11894 from M-Phansa/main Xuewei Niu 2025-10-09 16:53:40 +08:00
  • a54d95966b runtime-rs: Support virtio-scsi for initdata within non-TEE Alex Lyn 2025-10-09 15:52:33 +08:00
  • 5208ee4ec0 Merge pull request #11674 from was-saw/dragonball_seccomp Xuewei Niu 2025-10-09 15:01:15 +08:00
  • 8e1b33cc14 docs: add document for seccomp wangxinge 2025-09-09 18:04:30 +08:00
  • 2abf6965ff dragonball: add seccomp support for dragonball wangxinge 2025-09-29 13:46:09 +08:00
  • bb6fb8ff39 runtime-rs: add seccomp support for dragonball wangxinge 2025-09-29 12:02:04 +08:00
  • 91739d4425 gpu: PPCIE support DGX like systems Zvonko Kaiser 2025-10-08 17:07:28 +00:00
  • 364d3cded0 tests: k8s-nested-configmap-secret policy Dan Mihai 2025-09-29 22:56:25 +00:00
  • 62b12953c7 runtime: fix "num-queues expects uint64" error with virtio-blk Sergei Puzyrev 2025-10-03 13:37:12 -07:00
  • 4e4f9c44ae runtime: fix device typo Adeet Phanse 2025-10-07 10:41:42 -04:00
  • d954932876 Merge pull request #11883 from kata-containers/sprt/zizmor-fixes3 Aurélien Bombo 2025-10-08 17:01:48 -05:00
  • 07645cf58b ci: actionlint: Address issues and set as required Aurélien Bombo 2025-10-03 11:18:42 -05:00
  • b3a551d438 ci: zizmor: Reestablish as required test Aurélien Bombo 2025-10-03 11:02:02 -05:00
  • 5a4ddb8c71 ci: zizmor: Fix all template-injection alerts Aurélien Bombo 2025-10-03 10:57:41 -05:00
  • 7b203d1b43 ci: zizmor: Ignore dangerous-triggers audit for known safe usage Aurélien Bombo 2025-10-03 10:39:09 -05:00
  • 7afdfc7388 ci: zizmor: Disable undocumented-permissions audit Aurélien Bombo 2025-10-03 10:34:53 -05:00
  • 889ba0d5db Merge pull request #11901 from kata-containers/sprt/remove-docs-url-check Aurélien Bombo 2025-10-08 14:42:58 -05:00
  • ec81ea95df gha: Add workflow_dispatch trigger to docs-url-alive-check Aurélien Bombo 2025-10-08 11:52:12 -05:00
  • 4d760e64ae gha: Fix docs-url-alive-check workflow Aurélien Bombo 2025-10-08 11:51:07 -05:00
  • 476c827fca Merge pull request #11878 from kata-containers/sprt/privileged-docs Aurélien Bombo 2025-10-08 11:12:45 -05:00
  • dbb1eb959c kata-deploy: Allow users to set experimental_force_guest_pull Fabiano Fidêncio 2025-10-08 10:57:52 +02:00
  • 8c4bad68a8 kata-deploy: Remove kustomize yamls, rely on helm-chart only Fabiano Fidêncio 2025-10-07 14:26:36 +02:00
  • 3418cedacc ci: Add tests for erofs-snapshotter (for coco-qemu-dev) Fabiano Fidêncio 2025-10-07 12:10:47 +02:00
  • 544f688104 tests: Add ability to deploy vanilla k8s with erofs Fabiano Fidêncio 2025-10-07 12:05:00 +02:00