All pull requests

Pull requests

• only enable guest debug console with --guest-debug

  area/microVMarea/security
  #2291·Benjamin Elder (BenTheElder) opened Oct 7, 2026Collaborator·

  ·
  1

• ateapi: stamp the golden tag into the created Actor's source_tag

  area/api-machineryarea/schedulingkind/bug
  #2290·cloudonly opened Oct 7, 2026Contributor·

  ·

• Update Snapshots API to support Actor Lifecycle v2

  #2289·Michelle Au (msau42) opened Oct 7, 2026Collaborator·2 tasks·

  ·

• require actor cpu and memory limits

  area/apiDO NOT MERGE
  #2285·Benjamin Elder (BenTheElder) opened Oct 7, 2026Collaborator·

  ·
  2

• Worker: Report node HardwareIdentity during Worker registration

  #2282·shrutiyam-glitch opened Oct 6, 2026Collaborator·2 tasks·

  ·
  1

  1

• Move static runsc flags to configuration file

  area/gvisorkind/feature
  #2281·Fabricio Voznika (fvoznika) opened Oct 6, 2026Collaborator·2 tasks done·

  ·
  1

• imagecache: Verify layer content against its diffID before it enters the pool

  #2279·igooch opened Oct 6, 2026Collaborator·

  ·
  1

  3

• docs: say when to mark proto fields debug_redact and what it covers

  #2267·Da Huang (git286) opened Oct 6, 2026Collaborator·

  ·

• Authenticate bundled PostgreSQL logins with separate pod certificates

  #2266·Jeremy Alvis (iplay88keys) opened Oct 6, 2026Collaborator·

  ·
  2

• ateom-gvisor logs a warning when a running actor's sandbox dies

  #2258·Da Huang (git286) opened Oct 6, 2026Collaborator·2 tasks done·

  ·
  19

• ate-setup sets the actor JWT issuer (ACTOR_JWT_ISSUER), and ate-api-server requires it

  #2257·Max Thompson (thompsonmax) opened Oct 6, 2026Collaborator·2 tasks·

  ·

• E2E checks the actor JWTs the egress gateway injects

  #2256·Max Thompson (thompsonmax) opened Oct 6, 2026Collaborator·2 tasks·

  ·

• rename ateom -> ateworker

  area/api-machineryarea/gvisorarea/microVMbreaking-change
  #2254·Benjamin Elder (BenTheElder) opened Oct 6, 2026Collaborator·2 tasks done·

  ·
  1

  28

• fix(atenet): return the final resume error after budget expiry

  #2248·ktsoator (ktsoator) opened Oct 6, 2026Contributor·2 tasks done·

  ·
  1

• ateapi: record one scheduler assignment for each resume

  #2244·Jeff Luo (JeffLuoo) opened Oct 6, 2026Collaborator·2 tasks done·

  ·
  1

• ocispec: raise actor RLIMIT_NOFILE from 1024 to 1048576

  area/nodekind/feature
  #2242·Yuan Gao (ygao-g) opened Oct 6, 2026Collaborator·

  ·
  1

  7

• AWS port of substrate installation. Proven to work with gvisor sandboxing

  #2241·Ant Weiss (antweiss) opened Oct 6, 2026·

  ·
  1

  20

• ateapi: Support RDS/Aurora IAM database authentication through a sidecar

  area/api-machinerykind/feature
  #2238·Pedro Nunes (pintonunes) opened Oct 6, 2026Contributor·1 of 2 tasks·

  ·
  3

• Centralize TLS config setup for reload-on-handshake CA pools

  area/identitykind/cleanup
  #2237·Rashad Sirajudeen (rashadism) opened Oct 6, 2026Contributor·

  ·
  2

• Preserve atelet cancellation and deadline errors for API callers

  area/api-machinerykind/bug
  #2236·Eren Akbulut (eren23) opened Oct 6, 2026·

  ·
  1

• Fix kind apiserver redeploy issue - stuck in CrashLoopBackOff

  area/dev-infrakind/bug
  #2235·Lin Sun (linsun) opened Oct 6, 2026·

  ·
  3

• microvm: support MSHV through device allocation and backend-aware restore

  area/microVMkind/feature
  #2234·Martin Heberling (Bickor) opened Oct 6, 2026·

  ·
  9

• benchmarking: record GKE version, worker capacity and run metadata in trial_summary

  #2232·Nishanth Kotla (Nishanth29) opened Oct 6, 2026Contributor·2 tasks done·

  ·
  2

• hack/run-e2e.sh accepts the target path after go test flags

  area/dev-infrakind/bug
  #2226·Eric Curtin (ericcurtin) opened Oct 5, 2026Contributor·2 tasks done·

  ·
  1

  2

• Move snapshot transfers behind the object-store snapshot plugin

  #2224·ILLUM1N0X opened Oct 5, 2026Collaborator·

  ·
  1

  7