All pull requests

Pull requests

• feat: SELinux domains for pods and the control plane, and SELinux booleans

  #14876·rducom opened Nov 6, 2026Contributor·

  ·

• fix(security): let the CRI and the kubelet label unlabeled volumes and hugepages

  #14875·rducom opened Nov 6, 2026Contributor·

  ·

• fix(security): let the CRI containerd run the installer of an upgrade

  #14874·rducom opened Nov 6, 2026Contributor·

  ·

• fix(security): let machined kexec into the new kernel

  #14873·rducom opened Nov 6, 2026Contributor·

  ·

• chore: optimize machined binary size (and init allocations)

  status/ok-to-test
  #14870·smira opened Nov 6, 2026Member·

  ·
  4

• feat: allow overriding the CA bundle published as kube-root-ca.crt

  #14848·cgrard opened Nov 4, 2026·7 tasks done·

  ·
  1

• fix: optimize memory allocs

  integration/qemu-defaultstatus/ok-to-test
  #14847·smira opened Nov 4, 2026Member·

  ·
  5

  

• fix: add missing generation flags to machineconfig gen

  #14845·immanuwell opened Nov 4, 2026Contributor·6 of 7 tasks·

  ·
  1

• feat: finalize CPU partitioning

  integration/hypervisorintegration/qemustatus/ok-to-test
  #14844·frezbo opened Nov 4, 2026Member·

  ·
  1

  5

• Chore/test yardi runner synced

  status/ok-to-test
  #14828·martiyardi opened Nov 3, 2026·7 tasks·

  ·

• feat: container healthcheck controllers

  area/containersintegration/qemu
  #14823·majabojarska opened Nov 2, 2026Member·

  ·
  1

  

• feat: add log level configuration for host DNS

  #14814·fabiomatavelli opened Nov 2, 2026Contributor·5 of 7 tasks·

  ·
  1

  

• feat: support creating LVM PVs on RawVolumes

  status/ok-to-test
  #14796·dsseng opened Oct 29, 2026Member·

  ·
  7

  

• feat: restart policy for containers

  area/containersarea/machineconfigintegration/qemu-defaultintegration/qemu-enforcingintegration/talosctl
  #14795·nberlee opened Oct 29, 2026Contributor·6 of 7 tasks·

  ·
  1

  4

  

• feat: implement talosctl container exec

  area/cliarea/containersintegration/qemuintegration/talosctl
  #14781·nberlee opened Oct 29, 2026Contributor·6 of 7 tasks·

  ·
  1

  5

  

• fix: bind SBOM license inputs to module checksums

  #14778·noeljackson opened Oct 28, 2026Contributor·6 of 7 tasks·

  ·

• fix: give the mdadm runtime map directory a dedicated SELinux type

  #14777·noeljackson opened Oct 28, 2026Contributor·5 of 7 tasks·

  ·
  2

  

• chore: update module github.com/go-jose/go-jose/v4 to v4.1.6 [security]

  #14768·renovate[bot] opened Oct 28, 2026Bot·1 task·

  ·

• test: verify NVIDIA MPS sharing on AWS

  integration/aws-nvidia-mpsstatus/ok-to-test
  #14759·frezbo opened Oct 28, 2026Member·

  ·
  1

• feat: let an SBC overlay supply a measured device tree for the UKI

  #14758·ehbello opened Oct 28, 2026·7 tasks done·

  ·
  

• feat: add IPv6 addresses for the default DNS resolvers

  status/ok-to-test
  #14721·dsseng opened Oct 23, 2026Member·

  ·
  1

  1

• feat: pass host PCI devices through to hypervisor virtual machines

  area/hypervisorintegration/hypervisorkind/feature
  #14716·azgms opened Oct 22, 2026·7 tasks done·

  ·
  1

  

• fix: keep PCI devices on their target driver without rebinding them

  #14715·azgms opened Oct 22, 2026·7 tasks done·

  ·
  15

  

• chore: test yardi runners

  status/ok-to-test
  #14635·frezbo opened Oct 14, 2026Member·7 tasks·

  ·
  1

• fix: don't lose track of container tasks stopped across a CRI restart

  #14632·XT-Phate opened Oct 14, 2026Contributor·5 tasks done·

  ·