Commit Graph

  • 8c3f8f8e21 Merge pull request #11339 from kata-containers/sprt/require-agent-ctl Aurélien Bombo 2025-06-03 11:58:33 -04:00
  • 74e47382f8 Merge pull request #11016 from stevenhorsman/dependabot-configuration Steve Horsman 2025-06-03 15:12:32 +01:00
  • 8176eefdac Merge pull request #10748 from zvonkok/helm-doc Steve Horsman 2025-06-03 14:48:19 +01:00
  • 02ad39ddf1 genpolicy: push down warning about missing passwd file Markus Rudy 2025-06-03 11:17:23 +02:00
  • ec969e4dcd genpolicy: remove redundant group check Markus Rudy 2025-06-03 10:37:19 +02:00
  • 985e965adb doc: Added Helm Chart README.md Zvonko Kaiser 2025-04-23 19:30:43 +00:00
  • dc0da567cd Merge pull request #11340 from microsoft/danmihai1/image-size-alignment Dan Mihai 2025-06-02 14:33:21 -07:00
  • c2c194d860 kata-deploy: smaller guest image file for mariner Dan Mihai 2025-05-29 20:55:42 +00:00
  • 65385a5bf9 image: custom guest rootfs image file size alignment Dan Mihai 2025-05-29 20:51:24 +00:00
  • c575048aa7 Merge pull request #11329 from Xynnn007/fix-initdata-snp Steve Horsman 2025-06-02 15:24:12 +01:00
  • ae352e7e34 ci: Add dependabot groups stevenhorsman 2025-06-02 13:47:21 +01:00
  • a94388cf61 ci: Add dependabot config stevenhorsman 2025-06-02 13:46:13 +01:00
  • 8750eadff2 test: turn SNP on for initdata tests Xynnn007 2025-05-29 09:29:48 +08:00
  • 39aa481da1 runtime: fix initdata support for SNP Xynnn007 2025-05-29 09:25:59 +08:00
  • 57f3cb8b3b Merge pull request #11344 from fidencio/topic/kernel-add-tuntap-move-memagent-stuff Fabiano Fidêncio 2025-06-01 21:32:07 +02:00
  • 51cc960cdd Merge pull request #11346 from fidencio/topic/bump-cgroups-rs RuoqingHe 2025-05-31 04:13:05 +02:00
  • 48f8496209 Merge pull request #11327 from Champ-Goblem/agent/increase-limit-nofile Fabiano Fidêncio 2025-05-30 21:56:01 +02:00
  • 02c46471fd rust: Update cgroups-rs to its v0.3.5 release Fabiano Fidêncio 2025-05-30 12:12:16 +02:00
  • dadbfd42c8 kernel: Move mem-agent configs to the common kernel build Fabiano Fidêncio 2025-05-30 11:20:13 +02:00
  • a37080917d kernel: Add CONFIG_TUN for VPN services Champ-Goblem 2025-05-30 11:25:16 +02:00
  • b8a7350a3d Merge pull request #11324 from Champ-Goblem/runtime/fix-cgroup-deletion Fabiano Fidêncio 2025-05-30 21:23:07 +02:00
  • ef642fe890 runtime: fix cgroupv2 deletion when sandbox_cgroup_only=false Champ-Goblem 2025-05-28 16:39:01 +01:00
  • f4007e5dc1 agent: increase LimitNOFILE in the systemd service Champ-Goblem 2025-05-28 20:27:57 +01:00
  • 3f5dc87284 Merge pull request #11333 from stevenhorsman/csi-driver-permissions-fix Fabiano Fidêncio 2025-05-30 17:45:47 +02:00
  • 4586511c01 doc: Add Helm Chart entry Zvonko Kaiser 2025-01-16 20:05:34 +00:00
  • c03b38c7e3 ci: Require agent-ctl tests Aurélien Bombo 2025-05-29 14:09:42 -05:00
  • 586d9adfe5 workflow: add packages: write to csi-driver publish stevenhorsman 2025-05-29 15:56:04 +01:00
  • 3da213a8c8 Merge pull request #11326 from kata-containers/top-level-workflow-permissions Steve Horsman 2025-05-29 10:03:06 +01:00
  • c34416f53a workflows: Add explicit permissions where needed stevenhorsman 2025-05-28 12:03:14 +01:00
  • 088e97075c workflow: Add top-level permissions stevenhorsman 2025-05-28 15:05:52 +01:00
  • 353d0822fd Merge pull request #11314 from katexochen/p/svc-name-regex Dan Mihai 2025-05-28 10:08:38 -07:00
  • 7a9d919e3e Merge pull request #11322 from kata-containers/workflow-permissions Steve Horsman 2025-05-28 17:28:22 +01:00
  • 2667d4a345 Merge pull request #11323 from stevenhorsman/gatekeeper-workflow-permissions-ii Steve Horsman 2025-05-28 17:05:24 +01:00
  • 4d4fb86d34 workflow: Update gatekeeper permissions stevenhorsman 2025-05-28 15:58:00 +01:00
  • fed63e0801 Merge pull request #11319 from stevenhorsman/remove-old-workflows Steve Horsman 2025-05-28 15:38:19 +01:00
  • 49f86aaa0d Merge pull request #11320 from stevenhorsman/gatekeeper-workflow-permissions Steve Horsman 2025-05-28 15:38:06 +01:00
  • 3ff602c1e8 workflows: Add explicit permissions for attestation stevenhorsman 2025-05-28 12:03:14 +01:00
  • 2f0dc2ae24 workflows: gatekeeper: Update permissions stevenhorsman 2025-05-28 09:57:19 +01:00
  • f900b0b776 workflows: Delete workflows stevenhorsman 2025-05-28 09:37:48 +01:00
  • aab6caa141 Merge pull request #10362 from Apokleos/vfio-hotplug-runtime-rs Alex Lyn 2025-05-28 13:21:58 +08:00
  • ac934e001e Merge pull request #11244 from katexochen/p/guest-pull-config Fabiano Fidêncio 2025-05-27 16:00:09 +02:00
  • e69a4d203a runtime-rs: Increase QMP read timeout to mitigate failures alex.lyn 2025-05-20 12:41:02 +08:00
  • c4815eb3ad runtime: add option to force guest pull Paul Meyer 2025-05-08 11:46:01 +02:00
  • d3f81ec337 Merge pull request #11240 from Apokleos/copydir Fabiano Fidêncio 2025-05-27 12:41:21 +02:00
  • 8de8b8185e genpolicy: rename svc_name to svc_name_downward_env Paul Meyer 2025-05-27 08:53:23 +02:00
  • 78eb65bb0b genpolicy: fix svc_name regex Paul Meyer 2025-05-26 16:28:09 +02:00
  • 139dc13bdc Merge pull request #11301 from lifupan/fix_cgroup RuoqingHe 2025-05-27 05:05:32 +02:00
  • d77e33babf Merge pull request #11266 from ldoktor/ci-pp-retry Wainer Moschetta 2025-05-26 14:22:11 -03:00
  • c249769bb8 Merge pull request #11270 from ldoktor/gk Wainer Moschetta 2025-05-26 12:04:07 -03:00
  • 20d3bc6f37 Merge pull request #10964 from hsiangkao/drop_outdated_patches Fabiano Fidêncio 2025-05-26 13:00:25 +02:00
  • b441890749 kernel: drop outdated erofs patches for 6.1.y kernels Gao Xiang 2025-03-03 22:42:32 +08:00
  • 71b6acfd7e dragonball: vsock: support single descriptor Xingru Li 2025-05-26 14:23:49 +08:00
  • b6cafba5f6 Merge pull request #11308 from hsiangkao/enable_tmpfs_xattr RuoqingHe 2025-05-26 05:00:26 +02:00
  • b681dfb594 kernel: support CONFIG_TMPFS_XATTR=y Gao Xiang 2025-05-24 20:43:19 +08:00
  • a9ffdfc2ae Merge pull request #11294 from wainersm/delint_confidential_kbs RuoqingHe 2025-05-23 17:00:28 +02:00
  • e9b45126fc Merge pull request #11254 from sampleyang/main Fupan Li 2025-05-23 18:13:10 +08:00
  • 06c7c5bccb runtime-rs: fix vfio pci address domain 0001 problem yangsong 2025-05-09 17:28:38 +08:00
  • ddf333feaf tests/k8s: fix shellcheck SC1091 in confidential_kbs.sh Wainer dos Santos Moschetta 2025-05-22 15:38:27 -03:00
  • c9fb0b9c85 tests/k8s: fix shellcheck SC2154 in confidential_kbs.sh Wainer dos Santos Moschetta 2025-05-22 15:02:20 -03:00
  • 68d91d759a tests/k8s: add set -e to confidential_ksh.sh Wainer dos Santos Moschetta 2025-05-22 14:55:24 -03:00
  • b4adfcb3cb tests/k8s: apply shellcheck tips to confidential_kbs.sh Wainer dos Santos Moschetta 2025-05-20 18:11:43 -03:00
  • 043bab3d3e runtime-rs: Handle port allocation in PCIe topology for vfio devices alex.lyn 2025-05-20 11:18:46 +08:00
  • 01b822de16 runtime-rs: Get available port node in the PCIe topology alex.lyn 2025-05-20 11:06:32 +08:00
  • 533d07a2c3 runtime-rs: Introduce qemu-rs vfio device hotplug handler alex.lyn 2025-05-20 10:36:53 +08:00
  • 91f2e97aae Merge pull request #11267 from Rtoax/p001-fix-osbuilder-lib.sh-indent Steve Horsman 2025-05-22 09:54:18 +01:00
  • f1796fe9ba runtime-rs: Add more fields in VfioDevice to express vfio devices alex.lyn 2025-05-20 10:30:57 +08:00
  • 15cbc545ca runtime-rs: fix the issue of delete cgroup failed Fupan Li 2025-05-22 12:05:27 +08:00
  • 9356ed59d5 Merge pull request #11130 from wainersm/tests-better-report Steve Horsman 2025-05-21 17:21:35 +01:00
  • b519e9fdff Merge pull request #11293 from wainersm/tests_increase_kbs_timeout Steve Horsman 2025-05-21 17:14:52 +01:00
  • a897bce29f Merge pull request #11298 from stevenhorsman/release-3.17.0-bump 3.17.0 Steve Horsman 2025-05-21 12:06:24 +01:00
  • 7b90ff3c01 release: Bump version to 3.17.0 stevenhorsman 2025-05-21 09:27:25 +01:00
  • 5378e581d8 Merge pull request #11144 from Apokleos/hotplug-block-qemu-rs Fabiano Fidêncio 2025-05-21 11:31:48 +02:00
  • 67ee9f3425 ci.ocp: Improve logging of extra new resources Lukáš Doktor 2025-05-13 09:31:55 +02:00
  • 32dbc5d2a9 ci.ocp: Use SCRIPT_DIR to allow execution from any folder Lukáš Doktor 2025-05-13 09:30:25 +02:00
  • 0e4fb62bb4 ci.ocp: Retry first az command as login takes time to propagate Lukáš Doktor 2025-05-13 09:29:01 +02:00
  • 6c9b199ef1 Merge pull request #11289 from BbolroC/fix-vfio-coldplug Fabiano Fidêncio 2025-05-21 09:48:25 +02:00
  • fdcf11d090 tests/k8s: increase wait time of KBS service ingress Wainer dos Santos Moschetta 2025-05-20 15:20:08 -03:00
  • 80a816db9d workflows/run-k8s-tests-coco-nontee: add step to report tests Wainer dos Santos Moschetta 2025-02-17 16:40:25 -03:00
  • 8c4637d629 tests/k8s: print tests report Wainer dos Santos Moschetta 2025-02-17 15:37:48 -03:00
  • 5e3b8a019a tests/k8s: split and save bats outputs in files Wainer dos Santos Moschetta 2025-02-14 19:51:04 -03:00
  • f8c5aa6df6 Merge pull request #11259 from fitzthum/bump-gc-0140 Steve Horsman 2025-05-20 18:05:17 +01:00
  • c203d7eba6 ci.ocp: Set peer-pods-azure license Lukáš Doktor 2025-05-12 09:50:30 +02:00
  • b4aa1e3fbd Merge pull request #11279 from skazi0/repo-components Steve Horsman 2025-05-20 16:03:48 +01:00
  • b97b20295b ci.ocp: Make peer-pods setup executable Lukáš Doktor 2025-05-02 11:03:35 +02:00
  • 9a4432d197 Merge pull request #11233 from Ankita13-code/ankitapareek/execprocess-additional-input-validation Sumedh Alok Sharma 2025-05-20 20:11:41 +05:30
  • 91fb4353f6 osbuilder: ubuntu: Add REPO_COMPONENTS setting Jacek Tomasiak 2025-05-16 16:30:44 +02:00
  • 29099d139b Merge pull request #11280 from kata-containers/dependabot/cargo/src/tools/kata-ctl/ring-0.17.14 Fabiano Fidêncio 2025-05-20 13:47:22 +02:00
  • 0bc0623037 Merge pull request #11277 from skazi0/repo-url Fabiano Fidêncio 2025-05-20 13:46:01 +02:00
  • ad75595dc8 genpolicy: Add tests for various input validations for ExecProcessRequest Ankita Pareek 2025-05-05 12:37:37 +00:00
  • 1e466bf39c genpolicy: fix validation of env variables sourced from metadata.namespace Saul Paredes 2025-01-14 17:25:03 -08:00
  • a113b9eefd genpolicy: validate probe process fields Dan Mihai 2024-12-18 02:20:21 +00:00
  • c0b8c6ed5e genpolicy: validate process for commands from settings Dan Mihai 2024-12-18 01:50:22 +00:00
  • 6f78aaa411 genpolicy: use process inputs for allow_process() Dan Mihai 2024-12-18 01:10:16 +00:00
  • 2871c31162 Merge pull request #11273 from mythi/tdx-qemu-params Steve Horsman 2025-05-20 10:22:59 +01:00
  • 4b317dddfa Merge pull request #11271 from stevenhorsman/gatekeeper-truncate-names Steve Horsman 2025-05-20 10:20:05 +01:00
  • 4b27ca9233 runtime-rs: Implement volume copy allowlist check alex.lyn 2025-05-15 17:15:21 +08:00
  • 8910bddce8 kata-types: Introduce k8s special volumes for projected and downward-api alex.lyn 2025-05-15 16:29:23 +08:00
  • 6fa409df1a kata-agent: Improve file sync handling and address symlink issues alex.lyn 2025-05-09 23:02:26 +08:00
  • 654e6db91f runtime-rs: Add inotify-based real-time directory synchronization alex.lyn 2025-05-09 21:31:54 +08:00
  • 79b832b2f5 runtime-rs: Propagate k8s configs correctly when sharedfs is disabled alex.lyn 2025-05-07 16:28:27 +08:00