feat(dind): multi-queue support, Docker mode fixes, and gVisor sandbox support#876

Merged

michaellzc merged 30 commits into

mainfrom

michaellzc/dind-multi-queue

Jun 5, 2026

Commits on Jun 5, 2026

feat(dind): multi-queue support and Docker mode fixes

michaellzc
and
claude
committed
remove executor Service — executors are pull-based, no Service needed

michaellzc
and
claude
committed
fix(dind): point registry mirror at correct service name

michaellzc
and
claude
committed
feat(dind): convert private-docker-registry to StatefulSet

michaellzc
and
claude
committed
feat(dind): structured executor options and env validation

michaellzc
and
claude
committed
remove dind.override.yaml from tracking

michaellzc
and
claude
committed
chore: gitignore dind.override.yaml

michaellzc
and
claude
committed
feat(dind): remove executor.enabled, make daemon.json configurable

michaellzc
and
claude
committed
refactor(dind): DRY executor Deployment via named template

michaellzc
and
claude
committed
fix(dind): emit --- at call site, not inside named template

michaellzc
and
claude
committed
feat(dind): add queueName/queueNames per queue entry

michaellzc
and
claude
committed
fix up
michaellzc
committed
fix(dind): bind dockerd to 127.0.0.1 and add gVisor support

michaellzc
and
claude
committed
fix(dind): add --storage-driver=vfs when gVisor is enabled

michaellzc
and
claude
committed
fix(dind): add --iptables=false for gVisor

michaellzc
and
claude
committed
fix(dind): implement gVisor-compatible dockerd startup sequence

michaellzc
and
claude
committed
fix(dind/gvisor): pre-create docker0 bridge and fix device parsing

michaellzc
and
claude
committed
debug: add set -x to gVisor dind startup script
michaellzc
committed
fix(dind/gvisor): let Docker create docker0 itself instead of pre-creating

michaellzc
and
claude
committed
fix(dind): change probe from tcpSocket to exec for 127.0.0.1 bind

michaellzc
and
claude
committed
refactor(dind): move gVisor daemon flags into daemon.json via mergeOverwrite

michaellzc
and
claude
committed
refactor(dind): unify command block — single declaration, conditional body

michaellzc
and
claude
committed
refactor(dind): move all dockerd flags into daemon.json

michaellzc
and
claude
committed
fix up
michaellzc
committed
fix up
michaellzc
committed
refactor(dind): move gVisor securityContext and setupScript into values

michaellzc
and
claude
committed
refactor(dind): replace setupScript with dind.command / dind.gVisor.command

michaellzc
and
claude
committed
fix up
michaellzc
committed
fix up
michaellzc
committed
fix(dind): use wget /_ping for liveness/readiness probes

michaellzc
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(dind): multi-queue support, Docker mode fixes, and gVisor sandbox support#876

feat(dind): multi-queue support, Docker mode fixes, and gVisor sandbox support#876
michaellzc merged 30 commits into
mainfrom
michaellzc/dind-multi-queue

Commits on Jun 5, 2026

feat(dind): multi-queue support and Docker mode fixes

remove executor Service — executors are pull-based, no Service needed

fix(dind): point registry mirror at correct service name

feat(dind): convert private-docker-registry to StatefulSet

feat(dind): structured executor options and env validation

remove dind.override.yaml from tracking

chore: gitignore dind.override.yaml

feat(dind): remove executor.enabled, make daemon.json configurable

refactor(dind): DRY executor Deployment via named template

fix(dind): emit --- at call site, not inside named template

feat(dind): add queueName/queueNames per queue entry

fix up

fix(dind): bind dockerd to 127.0.0.1 and add gVisor support

fix(dind): add --storage-driver=vfs when gVisor is enabled

fix(dind): add --iptables=false for gVisor

fix(dind): implement gVisor-compatible dockerd startup sequence

fix(dind/gvisor): pre-create docker0 bridge and fix device parsing

debug: add set -x to gVisor dind startup script

fix(dind/gvisor): let Docker create docker0 itself instead of pre-creating

fix(dind): change probe from tcpSocket to exec for 127.0.0.1 bind

refactor(dind): move gVisor daemon flags into daemon.json via mergeOverwrite

refactor(dind): unify command block — single declaration, conditional body

refactor(dind): move all dockerd flags into daemon.json

fix up

fix up

refactor(dind): move gVisor securityContext and setupScript into values

refactor(dind): replace setupScript with dind.command / dind.gVisor.command

fix up

fix up

fix(dind): use wget /_ping for liveness/readiness probes