All pull requests

Pull requests

• Egress policies can inject tokens from RFC 8693 token exchange

  #3349·Max Thompson (thompsonmax) opened Oct 27, 2026Collaborator·1 of 2 tasks·

  ·
  1

• ate-setup: add --skip-atenet-router to install without the router

  #3348·Lior Lieberman (LiorLieberman) opened Oct 27, 2026Collaborator·2 tasks done·

  ·
  1

• atenet-router no longer stalls 15s on every start

  #3346·Chuang Wang (chuangw6) opened Oct 27, 2026Collaborator·1 of 2 tasks·

  ·
  1

• atenet: inject RFC 8693 exchanged tokens on egress

  #3345·Max Thompson (thompsonmax) opened Oct 27, 2026Collaborator·2 tasks·

  ·

• atenet: cache RFC 8693 token exchanges in a broker

  #3344·Max Thompson (thompsonmax) opened Oct 27, 2026Collaborator·2 tasks·

  ·

• ateworker: write an empty VOLUMES snapshot without durable-dir volumes

  #3343·ajaysundar.k (ajaysundark) opened Oct 27, 2026Contributor·1 of 2 tasks·

  ·

• The template reconciler skips templates marked for deletion

  #3342·Luiz Oliveira (laoj2) opened Oct 27, 2026Collaborator·

  ·

  · M3
  1

• UpdateActor rejects Actors marked for deletion

  #3341·Luiz Oliveira (laoj2) opened Oct 27, 2026Collaborator·

  ·
  2

• Update a deleting tag returns FAILED_PRECONDITION

  #3340·Luiz Oliveira (laoj2) opened Oct 27, 2026Collaborator·

  ·

  · M3
  1

• Assert HTTP/2 in egress CONNECT access log and reduce /mux concurrency

  #3339·Bo-Cheng Chu (bochengchu) opened Oct 27, 2026Collaborator·2 tasks done·

  ·

• e2e: test RevertActor across multiple durable snapshot generations

  #3338·nybidari opened Oct 27, 2026Collaborator·2 tasks done·

  ·

• ateapi: reject tokens of deleted ServiceAccounts

  area/api-machineryarea/identityarea/securitykind/bug
  #3337·Anish Ramasekar (aramase) opened Oct 27, 2026Collaborator·1 of 2 tasks·

  ·
  1

• Name the scope flag in kubectl ate access-policy hints

  area/cliarea/securitykind/cleanupkind/docs
  #3336·Shruti Nair (SHRUTI6991) opened Oct 27, 2026Collaborator·

  ·
  1

• atenet: add an RFC 8693 token exchange client to the egress gateway

  area/identityarea/networkarea/securitykind/feature
  #3335·Max Thompson (thompsonmax) opened Oct 27, 2026Collaborator·1 of 2 tasks·

  ·

• egress policy: add an RFC 8693 token exchange source to CredentialHeader

  area/apiarea/api-machineryarea/identityarea/networkarea/securitykind/feature
  #3334·Max Thompson (thompsonmax) opened Oct 27, 2026Collaborator·2 tasks·

  ·

• Shared volumes: concurrent holders with READ_WRITE_MANY, safe detach and safe unstage

  area/apiarea/api-machineryarea/nodearea/storagekind/feature
  #3332·hajiler opened Oct 27, 2026Collaborator·2 tasks done·

  ·

• docs: size the node disk for local snapshots

  area/nodearea/storagekind/docs
  #3329·igooch opened Oct 27, 2026Collaborator·

  ·

• atelet: run at system-node-critical

  area/nodearea/reliabilitykind/bug
  #3328·igooch opened Oct 27, 2026Collaborator·

  ·

  · M3

• e2e: cover default ports for http and https egress rules

  area/networkarea/testskind/feature
  #3325·Bo-Cheng Chu (bochengchu) opened Oct 27, 2026Collaborator·2 tasks·

  ·

• fix atelet deviceplugin wedge

  area/nodekind/bugmilestone-ackprio/P0
  #3323·Benjamin Elder (BenTheElder) opened Oct 27, 2026Collaborator·2 tasks done·

  ·

  · M3
  1

  

• atunnel, atenet-router and the egress gateway limit kernel send queues behind slow readers

  area/networkarea/nodekind/feature
  #3320·Chuang Wang (chuangw6) opened Oct 27, 2026Collaborator·2 tasks done·

  ·

• benchmarking: measure kernel socket memory behind slow readers in the atunnel and Envoy benchmarks

  area/benchmarkingarea/networkkind/feature
  #3319·Chuang Wang (chuangw6) opened Oct 27, 2026Collaborator·2 tasks done·

  ·

• ate-setup: separate e2e kustomize component from kind overlay

  area/dev-infraarea/testskind/cleanup
  #3318·Michelle Au (msau42) opened Oct 27, 2026Collaborator·2 tasks done·

  ·
  16

• docs: add extensibility guide for gateways

  area/networkarea/securitykind/docs
  #3317·Greg Castle (destijl) opened Oct 27, 2026Collaborator·2 tasks done·

  ·
  6

• docs: pass --component on every upgrade step

  area/dev-infraDO NOT MERGEkind/docs
  #3313·Haven Xia (HavenXia) opened Oct 27, 2026Member·2 tasks done·

  ·

  · v1.0.x
  6