microsoft/kata-containers issues and pull requests

#156 - genpolicy: add support for PodDisruptionBudget spec

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: upstream/merged

#156 - genpolicy: add support for PodDisruptionBudget spec

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: upstream/missing

#155 - policy: update pod-cm3.yaml sample

Pull Request - State: closed - Opened by danmihai1 about 1 year ago - 3 comments

#155 - policy: update pod-cm3.yaml sample

Pull Request - State: closed - Opened by danmihai1 about 1 year ago - 3 comments

#154 - Adapt code for vanilla Kata

Pull Request - State: closed - Opened by sprt about 1 year ago
Labels: upstream/missing

#154 - Adapt code for vanilla Kata

Pull Request - State: closed - Opened by sprt about 1 year ago
Labels: upstream/missing

#153 - genpolicy: add support for runAsUser

Pull Request - State: closed - Opened by danmihai1 about 1 year ago
Labels: upstream/merged

#153 - genpolicy: add support for runAsUser

Pull Request - State: closed - Opened by danmihai1 about 1 year ago
Labels: upstream/merged

#152 - genpolicy: Add support for seccompProfile field

Pull Request - State: closed - Opened by Redent0r about 1 year ago - 4 comments
Labels: upstream/merged

#152 - genpolicy: Add support for seccompProfile field

Pull Request - State: closed - Opened by Redent0r about 1 year ago - 4 comments
Labels: upstream/merged

#151 - genpolicy: don't panic without cache file

Pull Request - State: closed - Opened by danmihai1 about 1 year ago
Labels: upstream/merged

#150 - genpolicy: add shareProcessNamespace support

Pull Request - State: closed - Opened by danmihai1 about 1 year ago - 1 comment
Labels: upstream/merged

#150 - genpolicy: add shareProcessNamespace support

Pull Request - State: closed - Opened by danmihai1 about 1 year ago - 1 comment
Labels: upstream/merged

#149 - genpolicy: pick up improvements from upstream

Pull Request - State: closed - Opened by danmihai1 about 1 year ago
Labels: upstream/merged

#149 - genpolicy: pick up improvements from upstream

Pull Request - State: closed - Opened by danmihai1 about 1 year ago
Labels: upstream/merged

#148 - github: copy CODEOWNERS from cc-msft-prototypes

Pull Request - State: closed - Opened by sprt about 1 year ago
Labels: upstream-not-needed

#147 - github: add `upstream-missing` label to PR checklist

Pull Request - State: closed - Opened by sprt about 1 year ago
Labels: upstream-not-needed

#147 - github: add `upstream-missing` label to PR checklist

Pull Request - State: closed - Opened by sprt about 1 year ago
Labels: upstream-not-needed

#146 - github: add `upstream-missing` label to PR checklist

Pull Request - State: closed - Opened by sprt about 1 year ago

#146 - github: add `upstream-missing` label to PR checklist

Pull Request - State: closed - Opened by sprt about 1 year ago

#145 - genpolicy: add priorityClassName as a field in PodSpec interface

Pull Request - State: closed - Opened by arc9693 about 1 year ago - 4 comments
Labels: upstream/merged

#145 - genpolicy: add priorityClassName as a field in PodSpec interface

Pull Request - State: closed - Opened by arc9693 about 1 year ago - 4 comments
Labels: upstream/merged

#144 - Test PR

Pull Request - State: closed - Opened by sprt about 1 year ago

#143 - Test PR

Pull Request - State: closed - Opened by sprt about 1 year ago

#142 - tools: install genpolicy settings files

Pull Request - State: closed - Opened by danmihai1 about 1 year ago - 1 comment

#142 - tools: install genpolicy settings files

Pull Request - State: closed - Opened by danmihai1 about 1 year ago - 1 comment

#141 - runtime: disable protection check

Pull Request - State: closed - Opened by sprt about 1 year ago - 2 comments

#141 - runtime: disable protection check

Pull Request - State: closed - Opened by sprt about 1 year ago - 2 comments
Labels: upstream-missing

#140 - genpolicy: reject create custom hook settings

Pull Request - State: closed - Opened by danmihai1 about 1 year ago
Labels: upstream/merged

#139 - policy improvements

Pull Request - State: closed - Opened by danmihai1 about 1 year ago
Labels: upstream-missing

#138 - Trigger Sync workflow

Pull Request - State: closed - Opened by Zhuchengyu04 about 1 year ago

#137 - Improve the SetPolicy and CopyFile policy behavior

Pull Request - State: closed - Opened by danmihai1 about 1 year ago
Labels: upstream/merged

#136 - genpolicy: reject some of the CopyFile requests

Pull Request - State: closed - Opened by danmihai1 about 1 year ago
Labels: upstream/merged

#135 - genpolicy: update sample

Pull Request - State: closed - Opened by Redent0r about 1 year ago
Labels: upstream/not-needed

#134 - lib: Add type definition for Windows support

Pull Request - State: closed - Opened by Redent0r about 1 year ago
Labels: upstream/not-needed

#133 - osbuilder: use Azure Linux UVM build meta-package

Pull Request - State: closed - Opened by miz060 about 1 year ago - 2 comments
Labels: upstream-missing

#132 - Revert "Add kata metapackage change"

Pull Request - State: closed - Opened by miz060 about 1 year ago
Labels: upstream/not-needed

#131 - Create pull_request_template.md

Pull Request - State: closed - Opened by ms-mahuber about 1 year ago - 1 comment
Labels: upstream-not-needed

#130 - Test PR

Pull Request - State: closed - Opened by sprt about 1 year ago

#129 - genpolicy: Update oci_distribution to 0.10.0

Pull Request - State: closed - Opened by Redent0r about 1 year ago - 3 comments
Labels: upstream/merged

#128 - genpolicy: Add support for envFrom

Pull Request - State: closed - Opened by Redent0r about 1 year ago
Labels: upstream/merged

#127 - Adding Microsoft SECURITY.MD

Pull Request - State: closed - Opened by microsoft-github-policy-service[bot] about 1 year ago
Labels: upstream-not-needed

#126 - genpolicy: deny UpdateEphemeralMountsRequest

Pull Request - State: closed - Opened by danmihai1 about 1 year ago - 1 comment
Labels: upstream/merged

#126 - genpolicy: deny UpdateEphemeralMountsRequest

Pull Request - State: closed - Opened by danmihai1 about 1 year ago - 1 comment

#125 - Add kata metapackage change

Pull Request - State: closed - Opened by miz060 about 1 year ago - 1 comment
Labels: upstream/not-needed

#124 - Saulparedes/add ingress support

Pull Request - State: closed - Opened by Redent0r about 1 year ago

#124 - Saulparedes/add ingress support

Pull Request - State: open - Opened by Redent0r about 1 year ago

#123 - tools: Allow setting policy rego file via environment variable

Pull Request - State: closed - Opened by ms-mahuber about 1 year ago
Labels: upstream/merged

#122 - Align sources with upstream

Pull Request - State: closed - Opened by sprt about 1 year ago - 4 comments

#121 - Catch up our main branch to upstream

Pull Request - State: closed - Opened by sprt about 1 year ago

#120 - genpolicy: allow empty env vars

Pull Request - State: closed - Opened by Redent0r about 1 year ago
Labels: upstream/merged

#119 - utarfs: implement the enumeration of xattrs

Pull Request - State: closed - Opened by wedsonaf about 1 year ago
Labels: upstream-missing

#118 - Re add agent type definitions

Pull Request - State: closed - Opened by Redent0r about 1 year ago
Labels: upstream/not-needed

#117 - protocols: upgrade the ttrpc crate

Pull Request - State: closed - Opened by SethHollandsworth about 1 year ago - 2 comments
Labels: bug

#116 - docs: add agent policy how-to doc

Pull Request - State: closed - Opened by danmihai1 about 1 year ago

#115 - genpolicy: add topologySpreadConstraints support

Pull Request - State: closed - Opened by danmihai1 about 1 year ago

#114 - tools: pick up genpolicy improvements

Pull Request - State: closed - Opened by danmihai1 about 1 year ago

#113 - Update caching mechanism to allow for concurrent genpolicy runs

Pull Request - State: closed - Opened by SethHollandsworth about 1 year ago - 4 comments

#112 - Enable Confidential Guest by Default in Non-SEV-SNP CC Handler Configuration

Pull Request - State: closed - Opened by arc9693 about 1 year ago - 1 comment

#111 - policy: update samples, skip failing ones

Pull Request - State: closed - Opened by Redent0r about 1 year ago

#110 - genpolicy: Update samples and put samples list in json file

Pull Request - State: closed - Opened by Redent0r about 1 year ago

#109 - policy: allow the Host to read Guest stdout/stderr

Pull Request - State: closed - Opened by danmihai1 about 1 year ago

#108 - Workaround blocking stdout buffer issue

Pull Request - State: closed - Opened by BryceDFisher about 1 year ago - 1 comment

#107 - policy: update additional samples

Pull Request - State: closed - Opened by danmihai1 about 1 year ago

#106 - agent: non-blocking stdout and stderr pipes

Pull Request - State: closed - Opened by danmihai1 about 1 year ago - 2 comments

#105 - Update samples and add update script

Pull Request - State: closed - Opened by Redent0r about 1 year ago

#104 - Avoid removing zstd-libs from the UVM

Pull Request - State: closed - Opened by dallasd1 about 1 year ago

#103 - adding option for genpolicy settings for debugging containers

Pull Request - State: closed - Opened by SethHollandsworth over 1 year ago - 1 comment
Labels: enhancement

#102 - tardev: only use the suffix of a pathname as the name

Pull Request - State: closed - Opened by Redent0r over 1 year ago

#101 - Print an allow_storage_options condition check value earlier

Pull Request - State: closed - Opened by ms-mahuber over 1 year ago

#100 - updating regex for service name and ipv4 addresses

Pull Request - State: closed - Opened by SethHollandsworth over 1 year ago - 4 comments

#99 - WIP Replace oci_distribution usage with containerd_client and k8_cri

Pull Request - State: closed - Opened by Redent0r over 1 year ago

#98 - policy: improve DNS label regex

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#97 - policy: add support for readOnly volumeMounts

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#96 - Adding debug mode to genpolicy

Pull Request - State: closed - Opened by SethHollandsworth over 1 year ago - 2 comments

#95 - policy: more sample updates

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#94 - genpolicy: command line improvements

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#93 - policy: add support for terminationMessagePath

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#92 - Always assign 10 PCI segments and modify IGVM config validation

Pull Request - State: closed - Opened by ms-mahuber over 1 year ago

#91 - runtime: Fix k8 configmap/secrets update propagation with limitations when filesystem sharing is disabled.

Pull Request - State: closed - Opened by Sumynwa over 1 year ago

#90 - policy: more env variable regexes

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#89 - runtime: allow confidential_guest to be set without igvm

Pull Request - State: closed - Opened by dallasd1 over 1 year ago - 1 comment

#88 - adding debug mode

Pull Request - State: closed - Opened by SethHollandsworth over 1 year ago - 1 comment

#87 - policy: allow service http ports

Pull Request - State: closed - Opened by danmihai1 over 1 year ago - 1 comment

#86 - policy: add more request default values

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#85 - policy: bypass empty response from OPA

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#84 - policy: support regex for ExecProcessRequest

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#83 - policy: support emptyDir medium = Memory

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#82 - policy: additional StatefulSetSpec fields

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#81 - policy: support for StatefulSet minReadySeconds

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#80 - policy: support for additional tolerations fields

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#79 - policy: reduce rules size

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#78 - policy: capabilities clean-up

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#77 - policy: reduce rules size

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#76 - policy: reduce policy size

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#75 - policy: reduce policy size

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#74 - policy: reduce policy size

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#73 - policy: reduce policy size

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#72 - policy: reduce policy size

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

#71 - policy: reduce allow_storages complexity

Pull Request - State: closed - Opened by danmihai1 over 1 year ago

GitHub / microsoft/kata-containers issues and pull requests