All pull requests

Pull requests

• Make egress benchmark work with ingress authz

  #3043·yanavlasov opened Oct 21, 2026Collaborator·2 tasks done·

  ·

• setup-gcp no longer gives GKE nodes read access to every bucket in the project

  #3042·ILLUM1N0X opened Oct 21, 2026Collaborator·2 tasks done·

  ·

• Preserve committed local snapshots when reverting actors

  #3041·Luomu (cloudonly) opened Oct 21, 2026Contributor·

  ·

• benchmarking: add Weaver telemetry, orchestrator retries, and CPU flags

  #3039·M.Besher Massri (besher-massri) opened Oct 21, 2026·2 tasks done·

  ·

• Nodes can read only the micro-VM assets in the snapshot bucket

  #3038·ILLUM1N0X opened Oct 21, 2026Collaborator·2 tasks done·

  ·

• On GKE, micro-VM assets move to their own bucket and nodes lose access to the snapshot bucket

  #3037·ILLUM1N0X opened Oct 21, 2026Collaborator·2 tasks done·

  ·

• atecontroller: Limit the Secrets read to the egress MITM CA pool

  #3036·mikedickey opened Oct 21, 2026·1 of 2 tasks·

  ·
  1

• ate-setup: add size100 cluster profile, env passthrough, and credential retries

  #3030·M.Besher Massri (besher-massri) opened Oct 20, 2026·2 tasks done·

  ·

• benchmarking: harden Prometheus scrape rules, deploy.sh retries, and boomer pool

  #3029·M.Besher Massri (besher-massri) opened Oct 20, 2026·2 tasks done·

  ·

• manifests: Run control plane containers as non-root

  #3028·mikedickey opened Oct 20, 2026·1 of 2 tasks·

  ·
  1

• atecontroller, manifests: forward ATEWORKER_* env vars and raise controller API rate limits

  #3027·M.Besher Massri (besher-massri) opened Oct 20, 2026·2 tasks done·

  ·

• tarutil: drop fsync of rootfs-upper and durable-dir tars (#1954)

  #3026·pmandewalkar opened Oct 20, 2026Contributor·1 task·

  ·
  1

  4

• Renovate keeps the Go toolchain for the root and plugin modules patched

  #3025·Grant McCloskey (MushuEE) opened Oct 20, 2026Collaborator·2 tasks·

  ·

• imagecache: validate image volume names before constructing mount points

  #3024·Abhishek Sharma (abhisheksharma2411) opened Oct 20, 2026·1 of 2 tasks·

  ·
  1

• ateapi: stop asking for client certs when the pod-identity CA isn't configured

  #3023·Abhishek Sharma (abhisheksharma2411) opened Oct 20, 2026·1 of 2 tasks·

  ·
  1

• atelet, ateapi: report worker runtimes per sandbox class

  #3022·shrutiyam-glitch opened Oct 20, 2026Collaborator·2 tasks·

  ·
  1

  2

• CI fails when a plugin module or workflow disagrees with the root go.mod's Go toolchain

  #3021·Grant McCloskey (MushuEE) opened Oct 20, 2026Collaborator·1 of 2 tasks·

  ·
  1

• Use crypto/rand for upstream DNS transaction IDs

  area/networkarea/security
  #3020·Bo-Cheng Chu (bochengchu) opened Oct 20, 2026Collaborator·Queued
  1

• netns.GetFromName rejects names that resolve outside /run/netns

  #3019·Yufan Su (yufan-su) opened Oct 20, 2026Collaborator·1 of 2 tasks·

  ·
  2

• ateworker-microvm: add tmpfs golden slot pool and zero-copy guest RAM restore

  #3018·M.Besher Massri (besher-massri) opened Oct 20, 2026·2 tasks done·

  ·

• Fix quickstart setup instructions

  #3016·Spencer Hance (spencerhance) opened Oct 20, 2026·

  ·
  1

• ateworker: reuse completed checkpoint when workload is already stopped

  #3015·Chenyi Wang (chw120) opened Oct 20, 2026Collaborator·1 task done·

  ·

• ateworker-microvm: support file-backed guest memory snapshots and sparse delta creation

  #3014·M.Besher Massri (besher-massri) opened Oct 20, 2026·2 tasks done·

  ·

• ateworker-microvm: add parallel restore preparation and adaptive wakeup probe

  #3012·M.Besher Massri (besher-massri) opened Oct 20, 2026·2 tasks done·

  ·

• ateworker-microvm: add golden-base differential memory-ranges checkpointing

  #3011·M.Besher Massri (besher-massri) opened Oct 20, 2026·2 tasks done·

  ·