feat(kubernetes): add sidecar and proxy-pod topology configurations#2016

Closed

TaylorMutch wants to merge 14 commits into

mainfrom

feat/kubernetes-sidecar-topology

Commits on Jun 29, 2026

feat(policy): accept numeric UIDs in sandbox process identity validation

sjenning
authored and
TaylorMutch
committed
feat(supervisor): accept numeric UIDs for process identity dropping

sjenning
authored and
TaylorMutch
committed
feat(driver-kubernetes): resolve sandbox UID/GID from config or OpenShift SCC annotations

sjenning
authored and
TaylorMutch
committed
feat(driver-vm): add configurable sandbox UID/GID and update docs/examples

sjenning
authored and
TaylorMutch
committed
feat(kubernetes): add sidecar supervisor topology
TaylorMutch
committed
feat(kubernetes): reduce sidecar agent privileges
TaylorMutch
committed
docs(kubernetes): document sandbox topology
TaylorMutch
committed
Get kata containers working
TaylorMutch
committed
feat(kubernetes): add split-pod supervisor topology
TaylorMutch
committed
fix(kubernetes): recreate split-pod supervisors
TaylorMutch
committed
fix(supervisor): initialize l7 params in test policy
TaylorMutch
committed
refactor(kubernetes): rename proxy pod topology
TaylorMutch
committed
docs(kubernetes): clarify proxy pod network policy requirement
TaylorMutch
committed
docs(kubernetes): document runtime topology validation
TaylorMutch
committed