Repository navigation

feat(security): support Restricted game pods and per-server diagnostic opt-in - #764

Open

Baylem wants to merge 15 commits into

GameplanePanel:masterfrom

Baylem:fix/audit-restricted-workloads

Open

feat(security): support Restricted game pods and per-server diagnostic opt-in#764
Baylem wants to merge 15 commits into
GameplanePanel:masterfrom
Baylem:fix/audit-restricted-workloads

Commits on Oct 21, 2026
- feat(security): add Restricted workloads and per-server node capture opt-in
  Baylem
  committed
  c0e8f40
- merge: include shared web build prerequisite
  Baylem
  committed
  13594aa
- fix: confine capture identity creation to its output directory
  Baylem
  committed
  16fdc13
- ci: expand restricted workload checks on both architectures
  Baylem
  committed
  b029fcd
- fix: align capture fixtures with isolated credentials
  Baylem
  committed
  6663821
Commits on Oct 22, 2026
- fix(security): preserve shared config access through restricted upgrades
  Baylem
  committed
  d3968bb
- fix(operator): reject restricted host ports before template admission
  Baylem
  committed
  34efe8d
Commits on Oct 23, 2026
Commits on Oct 24, 2026
- test: verify shared PID survives restricted capture
  Baylem
  committed
  62b25fc
Commits on Oct 25, 2026
- fix: revalidate node diagnostic namespace authority
  Baylem
  committed
  0749710
- chore: merge upstream namespace controls into workload security
  Baylem
  committed
  f47fb6c
Commits on Oct 27, 2026
- chore: reconcile restricted workloads and refresh CI inputs
  Baylem
  committed
  af0e29f
Commits on Oct 28, 2026
- chore: reconcile restricted CRDs with upstream Tailscale schemas
  Baylem
  committed
  2e4b332