GitHub / NVIDIA/OpenShell / commits
| SHA | Message | Author | Date | Stats |
|---|---|---|---|---|
| 8be8b62a |
ci(vouch): close approved request discussions (#2929)
Signed-off-by: Evan Lezar <e****r@n****m> |
Evan Lezar <e****r@n****m>
Committed by: GitHub <n****y@g****m> |
3 days ago | |
| 4e992093 |
fix(docker): trace standalone driver over OTLP (#2923)
Signed-off-by: Evan Lezar <e****r@n****m> |
Evan Lezar <e****r@n****m>
Committed by: GitHub <n****y@g****m> |
3 days ago | |
| a715a90d |
fix(vm): bump gvproxy to v0.8.9 (#2901)
Signed-off-by: Evan Lezar <e****r@n****m> |
Evan Lezar <e****r@n****m>
Committed by: GitHub <n****y@g****m> |
3 days ago | |
| 60a9b4dc |
fix(ssh): add EMFILE backoff and exit notification to SSH accept loop (#2705)
Signed-off-by: politerealism <b****7@g****m> |
Polite_realism <1****m@u****m>
Committed by: GitHub <n****y@g****m> |
3 days ago | |
| 4d16a2a6 |
feat(gator): improve review output and launch compatibility (#2896)
Co-authored-by: John Myers <j****s@u****m> Signed-off-by: John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <j****s@u****m> |
John T. Myers <9****s@u****m>
Committed by: GitHub <n****y@g****m> |
3 days ago | |
| 0e79653a |
feat(tui): show persisted guidance on rejected policy chunks (#2908)
Signed-off-by: Vyncint Ng <1****t@u****m>, Vyncint Ng <1****t@u****m>, Vyncint Ng <1****t@u****m>, Vyncint Ng <1****t@u****m>, Vyncint Ng <1****t@u****m> |
Vyncint Ng <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
3 days ago | |
| 74015b95 |
fix(sandbox): terminate sandbox when proxy accept loop exits unexpectedly (#2...
Signed-off-by: politerealism <b****7@g****m>, politerealism <b****7@g****m>, politerealism <b****7@g****m>, politerealism <b****7@g****m>, politerealism <b****7@g****m>, politerealism <b****7@g****m>, politerealism <b****7@g****m>, politerealism <b****7@g****m>, politerealism <b****7@g****m> |
Polite_realism <1****m@u****m>
Committed by: GitHub <n****y@g****m> |
3 days ago | |
| 18ce13b9 |
feat(providers): expose actionable OAuth refresh failures (#2887)
Signed-off-by: Mrunal Patel <m****p@g****m>, Mrunal Patel <m****p@g****m>, Mrunal Patel <m****p@g****m>, Mrunal Patel <m****p@g****m>, Mrunal Patel <m****p@g****m>, Mrunal Patel <m****p@g****m> |
Mrunal Patel <m****p@g****m>
Committed by: GitHub <n****y@g****m> |
3 days ago | |
| 5206bc51 |
feat(sdk): add OAuth Client Credentials support to SDKs (#2907)
Signed-off-by: Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m> |
Seth Jennings <s****g@r****m>
Committed by: GitHub <n****y@g****m> |
3 days ago | |
| 38a94931 |
fix(gateway): let Ready win over stale Suspended in derive_phase (#2933)
Signed-off-by: Russell Bryant <r****t@r****m> |
Russell Bryant <r****t@r****m>
Committed by: GitHub <n****y@g****m> |
3 days ago | |
| fb6610df |
feat(build): embed auditable Rust dependency metadata (#2734)
Signed-off-by: Adrien Langou <a****u@n****m> |
alangou <a****u@n****m>
Committed by: GitHub <n****y@g****m> |
4 days ago | |
| e2ca9cb8 |
fix(test-guest): pin HVF runtime dependencies (#2924)
Signed-off-by: Evan Lezar <e****r@n****m> |
Evan Lezar <e****r@n****m>
Committed by: GitHub <n****y@g****m> |
4 days ago | |
| 45588390 |
fix(python): remove CLI from wheel (#2321)
Signed-off-by: Simon Scatton <s****n@n****m> |
Simon Scatton <4****s@u****m>
Committed by: GitHub <n****y@g****m> |
4 days ago | |
| 4fe5b0f6 |
fix(ci): allow pasta to receive Podman stop signals (#2900)
Signed-off-by: Evan Lezar <e****r@n****m>, Evan Lezar <e****r@n****m>, Evan Lezar <e****r@n****m>, Evan Lezar <e****r@n****m> |
Evan Lezar <e****r@n****m>
Committed by: GitHub <n****y@g****m> |
4 days ago | |
| aa848f16 |
fix(core): fall back to podman CLI when no API socket is found (#1858)
Signed-off-by: Russell Bryant <r****t@r****m>, Russell Bryant <r****t@r****m>, Russell Bryant <r****t@r****m>, Russell Bryant <r****t@r****m>, Russell Bryant <r****t@r****m> |
Russell Bryant <r****t@r****m>
Committed by: GitHub <n****y@g****m> |
4 days ago | |
| 72b9c4ac |
test(e2e): pin direct podman calls to harness socket on macOS (#2909)
Signed-off-by: Russell Bryant <r****t@r****m> |
Russell Bryant <r****t@r****m>
Committed by: GitHub <n****y@g****m> |
4 days ago | |
| 0a1f2465 |
feat(sandbox,podman): trust corporate CA for https:// proxies and intercepted...
Signed-off-by: Philippe Martin <p****n@r****m>, Philippe Martin <p****n@r****m>, Philippe Martin <p****n@r****m>, Philippe Martin <p****n@r****m>, Philippe Martin <p****n@r****m>, Philippe Martin <p****n@r****m>, Philippe Martin <p****n@r****m> |
Philippe Martin <p****n@r****m>
Committed by: GitHub <n****y@g****m> |
4 days ago | |
| d7e137f1 |
fix(proxy): normalize trailing-dot CONNECT hosts before policy evaluation (#2...
Signed-off-by: Artem Lytvyn <a****n@r****m>, Artem Lytvyn <a****n@r****m>, Artem Lytvyn <a****n@r****m>, Artem Lytvyn <a****n@r****m> |
Artem Lytvyn <a****n@r****m>
Committed by: GitHub <n****y@g****m> |
4 days ago | |
| e457974a |
feat(docker): export driver traces over OTLP (#2851)
Signed-off-by: Kris Hicks <k****s@n****m> |
krishicks <k****s@n****m>
Committed by: GitHub <n****y@g****m> |
4 days ago | |
| 905e99aa | feat(build): add Nix-native Linux toolchains (#2875) |
Simon Scatton <4****s@u****m>
Committed by: GitHub <n****y@g****m> |
5 days ago | |
| 7fc61389 |
docs(agent): warn on missing workflow labels (#2815)
Signed-off-by: Kris Hicks <k****s@n****m> |
krishicks <k****s@n****m>
Committed by: GitHub <n****y@g****m> |
5 days ago | |
| 40d1b486 |
feat(provider): support for SPIFFE backed token exchange (#1970)
Signed-off-by: Gordon Sim <g****m@r****m>, Gordon Sim <g****m@r****m>, Gordon Sim <g****m@r****m>, Gordon Sim <g****m@r****m>, Gordon Sim <g****m@r****m>, Gordon Sim <g****m@r****m>, Gordon Sim <g****m@r****m>, Gordon Sim <g****m@r****m>, Gordon Sim <g****m@r****m> |
grs <g****m@r****m>
Committed by: GitHub <n****y@g****m> |
5 days ago | |
| e3dc0112 |
fix(provider): isolate unbound static credentials (#2862)
Signed-off-by: Prekshi Vyas <p****v@n****m> |
Prekshi Vyas <3****s@u****m>
Committed by: GitHub <n****y@g****m> |
5 days ago | |
| 2f7fb655 |
chore(docs): relicense Fern stylesheet under Apache 2.0 (#2882)
Signed-off-by: Drew Newberry <a****y@n****m> |
Drew Newberry <a****y@n****m>
Committed by: GitHub <n****y@g****m> |
7 days ago | |
| 6c38646c |
feat(dev): add dedicated gateway:podman task (#2880)
Signed-off-by: Kris Hicks <k****s@n****m> |
krishicks <k****s@n****m>
Committed by: GitHub <n****y@g****m> |
7 days ago | |
| 679fe4c3 |
fix(policy): validate the applicable advisor candidate (#2850)
Co-authored-by: John Myers <j****s@u****m> Signed-off-by: John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <j****s@u****m> |
John T. Myers <9****s@u****m>
Committed by: GitHub <n****y@g****m> |
7 days ago | |
| 7adc05af |
feat(supervisor): expose sandbox name to middleware request context (#2771)
Signed-off-by: Artem Lytvyn <a****n@r****m>, Artem Lytvyn <a****n@r****m>, Artem Lytvyn <a****n@r****m> |
Artem Lytvyn <a****n@r****m>
Committed by: GitHub <n****y@g****m> |
7 days ago | |
| 56c45a99 |
fix(providers): honor configured profile sources in sandboxes (#2878)
Signed-off-by: Drew Newberry <a****y@n****m> |
Drew Newberry <a****y@n****m>
Committed by: GitHub <n****y@g****m> |
7 days ago | |
| de4c1fec |
fix(test-guest): support RPM installs with DNF5 (#2864)
Signed-off-by: Evan Lezar <e****r@n****m>, Evan Lezar <e****r@n****m>, Evan Lezar <e****r@n****m> |
Evan Lezar <e****r@n****m>
Committed by: GitHub <n****y@g****m> |
8 days ago | |
| 3be2cd8a |
fix(helm): preflight Agent Sandbox APIs (#2867)
Signed-off-by: Evan Lezar <e****r@n****m>, Evan Lezar <e****r@n****m>, Evan Lezar <e****r@n****m>, Evan Lezar <e****r@n****m>, Evan Lezar <e****r@n****m> |
Evan Lezar <e****r@n****m>
Committed by: GitHub <n****y@g****m> |
8 days ago | |
| 20d2e867 |
fix(sandbox): reject stale exit during restart (#2857)
Signed-off-by: Drew Newberry <a****y@n****m> |
Drew Newberry <a****y@n****m>
Committed by: GitHub <n****y@g****m> |
8 days ago | |
| 82f62fa3 |
docs(rfc): define stable release policy (#2695)
Signed-off-by: Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m> |
Drew Newberry <a****y@n****m>
Committed by: GitHub <n****y@g****m> |
8 days ago | |
| 40f82290 |
feat(compute): add standalone first-party drivers (#2822)
Co-authored-by: Evan Lezar <e****r@n****m> Signed-off-by: Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Evan Lezar <e****r@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Evan Lezar <e****r@n****m> |
Drew Newberry <a****y@n****m>
Committed by: GitHub <n****y@g****m> |
8 days ago | |
| dfb06e6a |
test(e2e): align detached sandbox assertions (#2856)
Signed-off-by: Drew Newberry <a****y@n****m> |
Drew Newberry <a****y@n****m>
Committed by: GitHub <n****y@g****m> |
8 days ago | |
| 0300e6dc |
fix(sandbox): order sidecar provider updates by generation (#2849)
Signed-off-by: John Myers <9****s@u****m> |
John T. Myers <9****s@u****m>
Committed by: GitHub <n****y@g****m> |
8 days ago | |
| 6c34a3c6 |
fix(sandbox): stabilize canonical main process tests (#2854)
Signed-off-by: Drew Newberry <a****y@n****m> |
Drew Newberry <a****y@n****m>
Committed by: GitHub <n****y@g****m> |
8 days ago | |
| ef296806 |
feat(sandbox): add canonical main process (#2726)
Signed-off-by: Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m> |
Drew Newberry <a****y@n****m>
Committed by: GitHub <n****y@g****m> |
8 days ago | |
| 9ae37607 |
refactor(compute): register compiled drivers (#2786)
Signed-off-by: Drew Newberry <a****y@n****m> |
Drew Newberry <a****y@n****m>
Committed by: GitHub <n****y@g****m> |
8 days ago | |
| b2ea8182 |
feat(network): enable Docker and Podman policy DNS and transparent TCP (#2723)
Signed-off-by: John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m> |
John T. Myers <9****s@u****m>
Committed by: GitHub <n****y@g****m> |
8 days ago | |
| 2c0adf48 |
feat(podman): export driver traces over OTLP (#2782)
Signed-off-by: Kris Hicks <k****s@n****m> |
krishicks <k****s@n****m>
Committed by: GitHub <n****y@g****m> |
8 days ago | |
| 0c6a3443 |
feat(network): add policy DNS correlation store (#2713)
Signed-off-by: John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m> |
John T. Myers <9****s@u****m>
Committed by: GitHub <n****y@g****m> |
8 days ago | |
| 4d7f402c |
feat(policy): establish direct TCP egress foundation (#2711)
Signed-off-by: John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m> |
John T. Myers <9****s@u****m>
Committed by: GitHub <n****y@g****m> |
8 days ago | |
| 4c5fce6e |
refactor(compute): support external driver parity (#2744)
Signed-off-by: Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m> |
Drew Newberry <a****y@n****m>
Committed by: GitHub <n****y@g****m> |
9 days ago | |
| 9505ca5e |
chore: remove Bazel build support (#2840)
Signed-off-by: Simon Scatton <s****n@n****m> |
Simon Scatton <4****s@u****m>
Committed by: GitHub <n****y@g****m> |
9 days ago | |
| 7909fb5d |
refactor(compute): unify gateway restart reconciliation (#2743)
Signed-off-by: Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m> |
Drew Newberry <a****y@n****m>
Committed by: GitHub <n****y@g****m> |
9 days ago | |
| 701382d0 |
fix(podman): wait for container stop completion (#2820)
Signed-off-by: Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m> |
Piotr Mlocek <p****k@n****m>
Committed by: GitHub <n****y@g****m> |
9 days ago | |
| c90fd648 |
fix(cli): reuse sandbox provisioning display (#2816)
Signed-off-by: Seth Jennings <s****g@r****m> |
Seth Jennings <s****g@r****m>
Committed by: GitHub <n****y@g****m> |
9 days ago | |
| b7078dc2 |
chore(gitignore): add Pi agent state (#2813)
Signed-off-by: Kris Hicks <k****s@n****m> |
krishicks <k****s@n****m>
Committed by: GitHub <n****y@g****m> |
9 days ago | |
| 6e90f3d5 |
feat(providers): store refresh credentials in credential drivers (#2801)
Signed-off-by: Mrunal Patel <m****p@g****m>, Mrunal Patel <m****p@g****m>, Mrunal Patel <m****p@g****m>, Mrunal Patel <m****p@g****m>, Mrunal Patel <m****p@g****m>, Mrunal Patel <m****p@g****m> |
Mrunal Patel <m****p@g****m>
Committed by: GitHub <n****y@g****m> |
9 days ago | |
| 998db047 |
feat(policy): allow non-root sandbox identities (#2785)
Signed-off-by: Drew Newberry <a****y@n****m> |
Drew Newberry <a****y@n****m>
Committed by: GitHub <n****y@g****m> |
9 days ago | |
| 2eb0880a |
feat(cli): support OIDC device authorization grant for headless login (#2795)
Signed-off-by: Jesse Jaggars <j****s@r****m>, Jesse Jaggars <j****s@r****m>, Jesse Jaggars <j****s@r****m>, Jesse Jaggars <j****s@r****m>, Jesse Jaggars <j****s@r****m> |
Jesse Jaggars <j****s@r****m>
Committed by: GitHub <n****y@g****m> |
9 days ago | |
| 3a16012d |
fix(cli): prompt for fresh OIDC login after logout (#2773)
Signed-off-by: Gordon Sim <g****m@r****m> |
grs <g****m@r****m>
Committed by: GitHub <n****y@g****m> |
10 days ago | |
| 0d708d6d |
fix(policy): gate uninspected credentialed endpoints (#2493)
Signed-off-by: Adrien Langou <a****u@n****m>, Adrien Langou <a****u@n****m>, Adrien Langou <a****u@n****m>, Adrien Langou <a****u@n****m> |
alangou <a****u@n****m>
Committed by: GitHub <n****y@g****m> |
10 days ago | |
| 8d67250a |
fix(providers): keep refresh credential handles stable (#2780)
Signed-off-by: Mrunal Patel <m****p@g****m>, Mrunal Patel <m****p@g****m>, Mrunal Patel <m****p@g****m> |
Mrunal Patel <m****p@g****m>
Committed by: GitHub <n****y@g****m> |
10 days ago | |
| 600bbae8 |
feat(ocsf): emit AI inference events via ai_operation profile on ApiActivity ...
Co-authored-by: Claude Opus 4.6 (1M context) <n****y@a****m> |
Adel Zaalouk <a****k@r****m>
Committed by: GitHub <n****y@g****m> |
10 days ago | |
| dc374e88 |
chore(sdk/go): remove coverage.out from tracking (#2774)
Signed-off-by: Roland Huß <r****s@r****m> |
Roland Huss <r****s@r****m>
Committed by: GitHub <n****y@g****m> |
11 days ago | |
| 2115b0c4 |
fix(driver-podman): compile container spec on macOS (#2789)
Signed-off-by: Evan Lezar <e****r@n****m>, Evan Lezar <e****r@n****m>, Evan Lezar <e****r@n****m> |
Evan Lezar <e****r@n****m>
Committed by: GitHub <n****y@g****m> |
11 days ago | |
| 877ddbac |
fix(supervisor-network): canonicalize dot-segments before policy evaluation (...
Signed-off-by: Adrien Langou <a****u@n****m>, Adrien Langou <a****u@n****m>, Adrien Langou <a****u@n****m>, Adrien Langou <a****u@n****m> |
alangou <a****u@n****m>
Committed by: GitHub <n****y@g****m> |
11 days ago | |
| 6340d187 | Update docs.yml to remove warning banner (#2687) |
Kirit Thadaka <k****a@g****m>
Committed by: GitHub <n****y@g****m> |
11 days ago | |
| 4dfeff59 |
docs(rfc): add RFC 0013 native Windows support via MXC (#2071)
Signed-off-by: Shailendra Singh <s****s@n****m>, Shailendra Singh <s****s@n****m>, Shailendra Singh <s****s@n****m>, Shailendra Singh <s****s@n****m>, Shailendra Singh <s****s@n****m> |
Shailendra Singh <s****s@n****m>
Committed by: GitHub <n****y@g****m> |
11 days ago | |
| 5d9b0f04 |
fix(inference): prepend publisher prefix for Vertex non-Anthropic models (#2735)
Signed-off-by: politerealism <b****7@g****m>, politerealism <b****7@g****m>, politerealism <b****7@g****m>, politerealism <b****7@g****m>, politerealism <b****7@g****m> |
Polite_realism <1****m@u****m>
Committed by: GitHub <n****y@g****m> |
11 days ago | |
| 6ebf10e2 |
fix(build): preserve version prefixes in mise lockfile (#2778)
Signed-off-by: Adrien Langou <a****u@n****m> |
alangou <a****u@n****m>
Committed by: GitHub <n****y@g****m> |
11 days ago | |
| 88cf35ef |
fix(bazel): enable driver extraction in core (#2769)
Signed-off-by: Simon Scatton <s****n@n****m> |
Simon Scatton <4****s@u****m>
Committed by: GitHub <n****y@g****m> |
12 days ago | |
| d51a653f |
feat(driver-podman): add userns config (#2562)
Signed-off-by: Giuseppe Scrivano <g****n@r****m>, Giuseppe Scrivano <g****n@r****m>, Giuseppe Scrivano <g****n@r****m> |
Giuseppe Scrivano <g****e@s****g>
Committed by: GitHub <n****y@g****m> |
13 days ago | |
| 44bf0df4 |
feat(middleware): inspect WebSocket text messages (#2477)
Signed-off-by: Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m> |
Piotr Mlocek <p****k@n****m>
Committed by: GitHub <n****y@g****m> |
14 days ago | |
| 59479f49 |
feat(k8s): add namespace-per-workspace support (RFC 0011 Phase 3) (#2656)
Signed-off-by: Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m>, Derek Carr <d****r@r****m> |
Derek Carr <d****r@r****m>
Committed by: GitHub <n****y@g****m> |
14 days ago | |
| 3581b9e4 | CODEOWNERS: remove maxamillion and add sjenning (#2755) |
Seth Jennings <s****g@r****m>
Committed by: GitHub <n****y@g****m> |
14 days ago | |
| ae40cf67 |
fix(gateway): respect OPENSHELL_BIND_ADDRESS in dev task (#2756)
Signed-off-by: Kris Hicks <k****s@n****m> |
krishicks <k****s@n****m>
Committed by: GitHub <n****y@g****m> |
14 days ago | |
| bdabb54c |
fix(security): authenticate extension services (#2638)
Signed-off-by: Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m> |
Piotr Mlocek <p****k@n****m>
Committed by: GitHub <n****y@g****m> |
14 days ago | |
| f12f3ef8 |
fix(macos): restore Homebrew sandbox callbacks (#2739)
Signed-off-by: Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m> |
Drew Newberry <a****y@n****m>
Committed by: GitHub <n****y@g****m> |
14 days ago | |
| 1074566c |
chore(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.0 (#2747)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
14 days ago | |
| d0c6dc3f |
feat(kubernetes): support corporate upstream proxy (#2633)
Signed-off-by: loveRhythm1990 <q****n@1****m>, loveRhythm1990 <q****n@1****m>, loveRhythm1990 <q****n@1****m>, loveRhythm1990 <q****n@1****m> |
LR90 <5****0@u****m>
Committed by: GitHub <n****y@g****m> |
14 days ago | |
| 7a7b3ee2 |
chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#2746)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
15 days ago | |
| 7547edc7 |
docs(issues): Center reports on user stories (#2615)
Signed-off-by: Kris Hicks <k****s@n****m> |
krishicks <k****s@n****m>
Committed by: GitHub <n****y@g****m> |
15 days ago | |
| c4b500a7 |
feat(helm): cert-manager external issuer + OpenShift passthrough Route (#2468)
Signed-off-by: Jesse Jaggars <j****s@r****m>, Jesse Jaggars <j****s@r****m>, Jesse Jaggars <j****s@r****m>, Jesse Jaggars <j****s@r****m>, Jesse Jaggars <j****s@r****m>, Jesse Jaggars <j****s@r****m>, Pi Agent <a****t@o****l>, Pi Agent <a****t@o****l>, Pi Agent <a****t@o****l>, Jesse Jaggars <j****s@r****m>, Jesse Jaggars <j****s@r****m>, Pi Agent <a****t@o****l> |
Jesse Jaggars <j****s@r****m>
Committed by: GitHub <n****y@g****m> |
15 days ago | |
| c5498239 |
docs(telemetry): split reports into one file per period and add Jul 26 + Aug ...
Signed-off-by: Kirit93 <k****a@n****m> |
Kirit Thadaka <k****a@g****m>
Committed by: GitHub <n****y@g****m> |
15 days ago | |
| 35fb27ef |
feat(sdk): add TypeScript SDK (@nvidia/openshell-sdk) (#2122)
Co-authored-by: Drew Newberry <a****y@n****m> Signed-off-by: Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Max Dubrinsky <m****y@n****m>, Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m>, Max Dubrinsky <m****y@n****m>, Drew Newberry <a****y@n****m> |
Max Dubrinsky <m****y@u****m>
Committed by: GitHub <n****y@g****m> |
15 days ago | |
| 496659c2 |
chore(deps): bump Swatinem/rust-cache from 2.9.1 to 2.9.2 (#2670)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
15 days ago | |
| 403dc759 |
chore(deps): bump jdx/mise-action from 4.2.0 to 4.2.4 (#2716)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
15 days ago | |
| 8dc55e21 |
feat(sdk/go): complete Go SDK with domain clients, auth, and hardening (#2702)
Co-authored-by: Drew Newberry <a****y@n****m> Signed-off-by: Roland Huß <r****s@r****m>, Drew Newberry <a****y@n****m>, Roland Huß <r****s@r****m>, Drew Newberry <a****y@n****m> |
Roland Huss <r****s@r****m>
Committed by: GitHub <n****y@g****m> |
15 days ago | |
| cd4d9057 |
ci(cargo-deny): add dependency audit with cargo-deny (#2677)
Signed-off-by: Ignas Baranauskas <i****u@r****m> |
Ignas Baranauskas <i****u@r****m>
Committed by: GitHub <n****y@g****m> |
16 days ago | |
| 0f8fad23 |
feat(sandbox): add stop and start operations (#2653)
Signed-off-by: Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m>, Seth Jennings <s****g@r****m> |
Seth Jennings <s****g@r****m>
Committed by: GitHub <n****y@g****m> |
16 days ago | |
| 245fe275 |
fix(dev): separate Podman Machine loopback listeners (#2725)
Signed-off-by: Kris Hicks <k****s@n****m> |
krishicks <k****s@n****m>
Committed by: GitHub <n****y@g****m> |
16 days ago | |
| f24a5aee |
perf(supervisor-network): avoid reparsing native policy input (#2654)
Signed-off-by: Shiju <s****u@n****m>, Shiju <s****u@n****m>, Shiju <s****u@n****m> |
Shiju <s****u@n****m>
Committed by: GitHub <n****y@g****m> |
16 days ago | |
| d22859c2 |
fix(gator): separate review budget from approval gate (#2704)
Co-authored-by: John Myers <j****s@u****m> Signed-off-by: John Myers <j****s@u****m> |
John T. Myers <9****s@u****m>
Committed by: GitHub <n****y@g****m> |
16 days ago | |
| dd2b4e3b |
feat(cli): warn when --env values look like credentials (#2655)
Signed-off-by: Artem Lytvyn <a****n@r****m>, Artem Lytvyn <a****n@r****m>, Artem Lytvyn <a****n@r****m>, Artem Lytvyn <a****n@r****m>, Artem Lytvyn <a****n@r****m> |
Artem Lytvyn <a****n@r****m>
Committed by: GitHub <n****y@g****m> |
17 days ago | |
| 2f96c53b |
feat(gateway,cli): windows compilation support (#2496)
Co-authored-by: Shailendra Singh <s****s@n****m>, Giedrius Burachas <g****s@n****m>, Jamie King <j****k@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <1****k@u****m> Signed-off-by: Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Giedrius Burachas <g****s@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <p****k@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Akber Raza <a****r@n****m>, Piotr Mlocek <1****k@u****m>, Piotr Mlocek <1****k@u****m>, Piotr Mlocek <1****k@u****m>, Piotr Mlocek <1****k@u****m>, Piotr Mlocek <1****k@u****m>, Akber Raza <a****r@n****m>, Piotr Mlocek <1****k@u****m>, Piotr Mlocek <1****k@u****m>, Piotr Mlocek <1****k@u****m>, Piotr Mlocek <1****k@u****m>, Piotr Mlocek <1****k@u****m>, Piotr Mlocek <1****k@u****m>, Shailendra Singh <s****s@n****m>, Akber Raza <a****r@n****m>, Giedrius Burachas <g****s@n****m>, Piotr Mlocek <p****k@n****m>, Piotr Mlocek <1****k@u****m> |
araza008 <1****8@u****m>
Committed by: GitHub <n****y@g****m> |
17 days ago | |
| 0310cbed |
fix(sbom): detect sha256 hashes in expression-form licenses in needs_fix (#1911)
Signed-off-by: John Myers <9****s@u****m>, John Myers <9****s@u****m> |
Mesut Oezdil <1****l@u****m>
Committed by: GitHub <n****y@g****m> |
17 days ago | |
| 3e191558 |
feat(build): add glibc-static supervisor libc variant (#2682)
Co-authored-by: Mrunal Patel <m****p@g****m> Signed-off-by: Mrunal Patel <m****p@g****m> |
Emilien Macchi <e****n@r****m>
Committed by: GitHub <n****y@g****m> |
17 days ago | |
| c825b1f8 |
perf(supervisor-middleware): remove body clones from local dispatch (#2679)
Signed-off-by: Shiju <s****u@n****m>, Piotr Mlocek <p****k@n****m> |
Shiju <s****u@n****m>
Committed by: GitHub <n****y@g****m> |
18 days ago | |
| 17096199 |
chore(ci): disable telemetry in internal test runs (#2648)
Signed-off-by: Matthew Grossman <m****n@n****m>, Matthew Grossman <m****n@n****m>, Matthew Grossman <m****n@n****m>, Matthew Grossman <m****n@n****m>, Matthew Grossman <m****n@n****m> |
Matthew Grossman <m****n@n****m>
Committed by: GitHub <n****y@g****m> |
18 days ago | |
| 815615f4 |
fix(gateway-interceptors): configure connect timeout and HTTP/2 keepalive on ...
Signed-off-by: Artem Lytvyn <a****n@r****m> |
Artem Lytvyn <a****n@r****m>
Committed by: GitHub <n****y@g****m> |
18 days ago | |
| 0120535e |
feat(proxy): bind static credentials to provider endpoints (#2510)
Co-authored-by: John Myers <j****s@u****m> Signed-off-by: John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <9****s@u****m>, John Myers <j****s@u****m>, John Myers <9****s@u****m> |
John T. Myers <9****s@u****m>
Committed by: GitHub <n****y@g****m> |
18 days ago | |
| 3ebed4e7 |
fix(gator): allow same-sha state nudges (#2681)
Co-authored-by: John Myers <j****s@u****m> Signed-off-by: John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <j****s@u****m>, John Myers <j****s@u****m> |
John T. Myers <9****s@u****m>
Committed by: GitHub <n****y@g****m> |
18 days ago | |
| a8bdebe0 |
fix(sandbox): acknowledge unchanged policy revisions (#2557)
Signed-off-by: Nave Cohen <n****e@m****m>, Nave Cohen <n****e@m****m>, Nave Cohen <n****e@m****m> |
Nave Cohen <n****e@m****m>
Committed by: GitHub <n****y@g****m> |
19 days ago | |
| f48b05e3 |
fix(gateway-interceptors): apply tls-native-roots for HTTPS interceptor endpo...
Co-authored-by: Drew Newberry <a****y@n****m> Signed-off-by: Drew Newberry <a****y@n****m>, Drew Newberry <a****y@n****m> |
Saurabh Agarwal <s****w@r****m>
Committed by: GitHub <n****y@g****m> |
19 days ago | |
| 5e2f0d1b |
fix(policy): prevent implicit authorization inheritance (#2499)
Signed-off-by: Shiju <s****u@n****m>, Shiju <s****u@n****m>, Shiju <s****u@n****m>, Shiju <s****u@n****m>, Shiju <s****u@n****m>, Shiju <s****u@n****m>, Shiju <s****u@n****m> |
Shiju <s****u@n****m>
Committed by: GitHub <n****y@g****m> |
19 days ago | |
| 4cb77a90 |
fix(e2e): separate Podman Machine loopback listeners (#2622)
Signed-off-by: Matthew Grossman <m****n@n****m>, Matthew Grossman <m****n@n****m>, Matthew Grossman <m****n@n****m>, Matthew Grossman <m****n@n****m>, Matthew Grossman <m****n@n****m> |
Matthew Grossman <m****n@n****m>
Committed by: GitHub <n****y@g****m> |
21 days ago | |
| 8ddd98c3 |
feat(bazel): build vm driver and pull runtime from Github (#2650)
Signed-off-by: Simon Scatton <s****n@n****m>, Simon Scatton <s****n@n****m>, Simon Scatton <s****n@n****m> |
Simon Scatton <4****s@u****m>
Committed by: GitHub <n****y@g****m> |
22 days ago | |
| d85339d6 |
build(bazel): add credential driver targets (#2649)
Signed-off-by: Simon Scatton <s****n@n****m>, Simon Scatton <s****n@n****m>, Simon Scatton <s****n@n****m> |
Simon Scatton <4****s@u****m>
Committed by: GitHub <n****y@g****m> |
22 days ago |