All pull requests

Pull requests

• docs(api): fix systeminfo volume examples

  #2346·ktsoator (ktsoator) opened Oct 8, 2026Contributor·

  ·

• hardware: report per-runtime CPU attributes at worker registration

  #2345·shrutiyam-glitch opened Oct 8, 2026Collaborator·2 tasks·

  ·

• ateom-gvisor: quote runsc's log and the sentry panic log in failures

  #2344·Yu YI (erain) opened Oct 8, 2026·2 tasks done·

  ·

• e2e: say why an egress MITM fetch failed, and ride out transient 5xx

  #2342·Yu YI (erain) opened Oct 8, 2026·2 tasks done·

  ·

• docs(csi): fix server names in tls examples

  #2340·ktsoator (ktsoator) opened Oct 8, 2026Contributor·

  ·
  1

• Expose PostgreSQL pool saturation and connection acquisition metrics

  #2338·Ridwan Hoq (ridhoq) opened Oct 8, 2026·4 tasks done·

  ·
  1

• kubectl-ate: add --source to select container or lifecycle log lines

  #2337·Yu YI (erain) opened Oct 8, 2026·2 tasks done·

  ·
  12

  

• podcertcontroller refuses a request that names another ServiceAccount or node

  #2336·Eric Curtin (ericcurtin) opened Oct 8, 2026Contributor·2 tasks done·

  ·
  1

• atecontroller: add flags for worker sync concurrency and kube API rate limits

  #2334·Chenyi Wang (chw120) opened Oct 8, 2026Collaborator·1 of 2 tasks·

  ·

• SandboxConfig now holds multiple named versions with a default

  breaking-change
  #2333·Zoe Zhao (zoez7) opened Oct 8, 2026Collaborator·2 tasks done·

  ·
  1

• Add sandboxClasses with an optional SandboxConfig ref to WorkerPool

  breaking-change
  #2332·Zoe Zhao (zoez7) opened Oct 8, 2026Collaborator·1 of 2 tasks·

  ·
  2

• ateom-gvisor: attribute the pause container's sandbox runtime output

  area/gvisorarea/observabilitykind/bug
  #2330·cloudonly opened Oct 8, 2026Contributor·

  ·

• Allow ActorTemplates to disable golden snapshot creation

  area/api-machineryarea/schedulingkind/feature
  #2328·cloudonly opened Oct 8, 2026Contributor·2 tasks done·

  ·
  1

• docs: add substrate security guide and principles

  #2326·Greg Castle (destijl) opened Oct 8, 2026Collaborator·

  ·

• benchmarking/sweperf: run each trajectory on a fresh actor

  #2323·pmandewalkar opened Oct 8, 2026Contributor·2 tasks done·

  ·

• Delete unused actor_template_ref from ActorAssigment sub-resource

  #2322·Julian Gutierrez Oschmann (juli4n) opened Oct 7, 2026Collaborator·

  ·

• Block link local egress in atunnel

  area/networkbreaking-changekind/feature
  #2319·Keith Mattix II (keithmattix) opened Oct 7, 2026Collaborator·2 tasks·

  ·
  1

• WIP: Improve ate-apiserver layering.

  #2318·Julian Gutierrez Oschmann (juli4n) opened Oct 7, 2026Collaborator·

  ·

• Egress gateway reports actor JWT cache hits and mint latency

  #2317·Max Thompson (thompsonmax) opened Oct 7, 2026Collaborator·2 tasks done·

  ·

• cdiinject: confine device paths and host mounts to allowed roots

  area/nodekind/cleanup
  #2315·Benjamin Elder (BenTheElder) opened Oct 7, 2026Collaborator·

  ·
  1

• ate-setup: choose the StorageClass of the bundled PostgreSQL

  #2314·Eric Curtin (ericcurtin) opened Oct 7, 2026Contributor·2 tasks done·

  ·
  1

  1

• ateapi: stamp HardwareIdentity onto snapshots

  #2311·shrutiyam-glitch opened Oct 7, 2026Collaborator·2 tasks·

  ·
  1

• Reject requests with duplicate ate-target-actor headers across HTTP and CONNECT

  #2308·Greg Castle (destijl) opened Oct 7, 2026Collaborator·2 tasks done·

  ·
  1

  13

• Warn when overlapping activations register system-info volumes for the same actor UID

  #2306·Adhita Selvaraj (swiftdiaries) opened Oct 7, 2026Contributor·2 tasks done·

  ·
  4

• benchmark(ateom-gvisor): log per-actor checkpoint and restore phase b…

  #2302·Lucky Abolorunke (Oneimu) opened Oct 7, 2026Collaborator·

  ·
  2