All pull requests

Pull requests

• fix: drop packets queued before the pcap BPF filter is attached

  #14920·sarankumar1325 opened Nov 10, 2026·

  ·
  1

• fix: log lifecycle service actions to console

  #14917·smira opened Nov 10, 2026Member·

  ·
  1

  

• fix: don't zero the discovered volume partition offset

  #14916·smira opened Nov 10, 2026Member·

  ·
  2

  

• test: speed up container suite short mode

  area/containersintegration/qemu-defaultintegration/qemu-enforcingkind/test
  #14914·majabojarska opened Nov 10, 2026Member·

  ·
  4

  

• feat: control pids.max for containers and VMs cgroups roots

  area/containersarea/hypervisorintegration/hypervisorintegration/qemu-defaultintegration/qemu-enforcing
  #14911·majabojarska opened Nov 10, 2026Member·

  ·
  2

  4

  

• feat: containers support security.readOnlyRootFS

  area/containersarea/machineconfigstatus/ok-to-test
  #14901·majabojarska opened Nov 10, 2026Member·

  ·
  1

  5

  

• feat: refactor etcd config to be multi-doc

  integration/qemu-13integration/qemu-defaultstatus/ok-to-test
  #14896·smira opened Nov 9, 2026Member·

  ·
  1

  3

  

• fix(security): label STATE on disk with system_state_t

  integration/qemu-enforcingintegration/trusted-boot-enforcingstatus/ok-to-test
  #14894·smira opened Nov 9, 2026Member·

  ·
  8

  

• feat: provision writable disks from images

  area/hypervisorarea/machineconfigintegration/hypervisorstatus/ok-to-test
  #14893·shanduur opened Nov 9, 2026Member·

  ·
  15

• feat: allow empty ExtensionServiceConfig documents

  #14885·evan314159 opened Nov 9, 2026·7 tasks done·

  ·

• feat: add trustGuestRxFilters to hypervisor VM interfaces

  #14879·jhindersson opened Nov 7, 2026·6 tasks done·

  ·
  

• feat: SELinux domains for pods and the control plane, and SELinux booleans

  #14876·rducom opened Nov 6, 2026Contributor·

  ·
  1

  

• fix(security): let the CRI and the kubelet label unlabeled volumes and hugepages

  #14875·rducom opened Nov 6, 2026Contributor·

  ·
  2

  

• feat: allow overriding the CA bundle published as kube-root-ca.crt

  #14848·cgrard opened Nov 4, 2026·7 tasks done·

  ·
  1

  

• feat: finalize CPU partitioning

  integration/hypervisorintegration/qemu-defaultstatus/ok-to-test
  #14844·frezbo opened Nov 4, 2026Member·

  ·
  1

  6

• Chore/test yardi runner synced

  status/ok-to-test
  #14828·martiyardi opened Nov 3, 2026·7 tasks·

  ·

• feat: container healthcheck controllers

  area/containersintegration/qemu-defaultintegration/qemu-enforcing
  #14823·majabojarska opened Nov 2, 2026Member·

  ·
  1

  

• feat: add log level configuration for host DNS

  #14814·fabiomatavelli opened Nov 2, 2026Contributor·5 of 7 tasks·

  ·
  1

  

• feat: support creating LVM PVs on RawVolumes

  status/ok-to-test
  #14796·dsseng opened Oct 29, 2026Member·

  ·
  7

  

• feat: implement talosctl container exec

  area/cliarea/containersintegration/qemuintegration/talosctl
  #14781·nberlee opened Oct 29, 2026Contributor·6 of 7 tasks·

  ·
  1

  5

  

• fix: bind SBOM license inputs to module checksums

  #14778·noeljackson opened Oct 28, 2026Contributor·6 of 7 tasks·

  ·

• chore: update module github.com/go-jose/go-jose/v4 to v4.1.6 [security]

  #14768·renovate[bot] opened Oct 28, 2026Bot·1 task·

  ·

• test: verify NVIDIA MPS sharing on AWS

  integration/aws-nvidia-mpsstatus/ok-to-test
  #14759·frezbo opened Oct 28, 2026Member·

  ·
  1

• feat: let an SBC overlay supply a measured device tree for the UKI

  #14758·ehbello opened Oct 28, 2026·7 tasks done·

  ·
  

• feat: add IPv6 addresses for the default DNS resolvers

  status/ok-to-test
  #14721·dsseng opened Oct 23, 2026Member·

  ·
  1

  1