Repository navigation

feat(security): support Restricted game pods and per-server diagnostic opt-in - #834

Merged

ValgulNecron merged 28 commits into

stack/pr-766from

stack/pr-764

Nov 7, 2026

Merged

feat(security): support Restricted game pods and per-server diagnostic opt-in#834
ValgulNecron merged 28 commits into
stack/pr-766from
stack/pr-764

Commits on Oct 21, 2026
- feat(security): add Restricted workloads and per-server node capture opt-in
  Baylem
  committed
  c0e8f40
- merge: include shared web build prerequisite
  Baylem
  committed
  13594aa
- fix: confine capture identity creation to its output directory
  Baylem
  committed
  16fdc13
- ci: expand restricted workload checks on both architectures
  Baylem
  committed
  b029fcd
- fix: align capture fixtures with isolated credentials
  Baylem
  committed
  6663821
Commits on Oct 22, 2026
- fix(security): preserve shared config access through restricted upgrades
  Baylem
  committed
  d3968bb
- fix(operator): reject restricted host ports before template admission
  Baylem
  committed
  34efe8d
Commits on Oct 23, 2026
Commits on Oct 24, 2026
- test: verify shared PID survives restricted capture
  Baylem
  committed
  62b25fc
Commits on Oct 25, 2026
- fix: revalidate node diagnostic namespace authority
  Baylem
  committed
  0749710
- chore: merge upstream namespace controls into workload security
  Baylem
  committed
  f47fb6c
Commits on Oct 27, 2026
- chore: reconcile restricted workloads and refresh CI inputs
  Baylem
  committed
  af0e29f
Commits on Oct 28, 2026
- chore: reconcile restricted CRDs with upstream Tailscale schemas
  Baylem
  committed
  2e4b332
Commits on Oct 31, 2026
- Merge upstream and address stopped capture review feedback
  Baylem
  committed
  63486f6
Commits on Nov 4, 2026
- merge: stack restricted workloads on stopped backup integration
  Baylem
  committed
  ce65034
- fix(security): isolate node diagnostics from every managed namespace
  Baylem
  committed
  4f07ac2
Commits on Nov 5, 2026
- fix(security): require diagnostics admin on selected cluster
  Baylem
  committed
  31a8851
- merge: carry shared Trivy installer from stopped backups
  Baylem
  committed
  91f4df6
Commits on Nov 6, 2026
- Merge stopped-backup review fixes and compress security update
  Baylem
  committed
  3ceace2
- Merge workspace checksum for compress security update
  Baylem
  committed
  fbdb1c2
- merge: carry bounded source admission into restricted workloads
  Baylem
  committed
  ccb61eb
- merge: carry source-admission regression compatibility
  Baylem
  committed
  fcff80f
- merge: carry backup source status regression fix
  Baylem
  committed
  bd17465
- merge: carry patched networking dependencies into restricted workloads
  Baylem
  committed
  4e56aa3
- merge: normalize networking dependency checksums
  Baylem
  committed
  e4695f6
- merge: retain required workspace graph checksums
  Baylem
  committed
  a669276

Commits

Commits on Oct 21, 2026

Commits on Oct 22, 2026

Commits on Oct 23, 2026

Commits on Oct 24, 2026

Commits on Oct 25, 2026

Commits on Oct 27, 2026

Commits on Oct 28, 2026

Commits on Oct 31, 2026

Commits on Nov 4, 2026

Commits on Nov 5, 2026

Commits on Nov 6, 2026