Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
NVIDIA
/
OpenShell
Public
Notifications
You must be signed in to change notification settings
Fork
1.3k
Star
8.8k
Code
Issues
247
Pull requests
163
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
feat(kubernetes): add cni-sidecar supervisor topology
- #2606
#2606
Closed
russellb
wants to merge 29 commits into
NVIDIA:main
NVIDIA/OpenShell:main
from
russellb:feat/kubernetes-cni-sidecar-topology
russellb/OpenShell:feat/kubernetes-cni-sidecar-topology
Copy head branch name to clipboard
Conversation
Commits
29
(29)
Checks
Files changed
Closed
feat(kubernetes): add cni-sidecar supervisor topology
#2606
russellb
wants to merge 29 commits into
NVIDIA:main
NVIDIA/OpenShell:main
from
russellb:feat/kubernetes-cni-sidecar-topology
russellb/OpenShell:feat/kubernetes-cni-sidecar-topology
Copy head branch name to clipboard
Commits
Commits on Sep 8, 2026
feat(kubernetes): add cni-sidecar supervisor topology
Show description for 040024c
TaylorMutch
authored and
Russell Bryant
committed
040024c
View commit details
Copy full SHA for 040024c
Browse repository at this point
docs(cni): design for cni-sidecar on OpenShift Multus
Show description for e56d1f0
russellb
authored and
Russell Bryant
committed
e56d1f0
View commit details
Copy full SHA for e56d1f0
Browse repository at this point
feat(cni): add multus-chain install mode for OpenShift
Show description for 76b681f
russellb
authored and
Russell Bryant
committed
76b681f
View commit details
Copy full SHA for 76b681f
Browse repository at this point
feat(cni): add gated privileged SCC for OpenShift
Show description for cdc36e8
russellb
authored and
Russell Bryant
committed
cdc36e8
View commit details
Copy full SHA for cdc36e8
Browse repository at this point
feat(helm): add OpenShift cni-sidecar values overlay
Show description for b7f2f90
russellb
authored and
Russell Bryant
committed
b7f2f90
View commit details
Copy full SHA for b7f2f90
Browse repository at this point
docs(cni): document OpenShift multus-chain mode
Show description for 07d84a1
russellb
authored and
Russell Bryant
committed
07d84a1
View commit details
Copy full SHA for 07d84a1
Browse repository at this point
fix(cni): scope privileged SCC to a dedicated CNI service account
Show description for 202088a
russellb
authored and
Russell Bryant
committed
202088a
View commit details
Copy full SHA for 202088a
Browse repository at this point
feat(helm): add minimal sandbox SCC for OpenShift binary-aware policy
Show description for c791869
russellb
authored and
Russell Bryant
committed
c791869
View commit details
Copy full SHA for c791869
Browse repository at this point
docs(rfc): propose cni-sidecar supervisor topology
Show description for 103b387
russellb
authored and
Russell Bryant
committed
103b387
View commit details
Copy full SHA for 103b387
Browse repository at this point
docs(rfc): link topology PRs in cni-sidecar RFC
Show description for 7e3af74
russellb
authored and
Russell Bryant
committed
7e3af74
View commit details
Copy full SHA for 7e3af74
Browse repository at this point
fix(cni-sidecar): address review findings for OpenShift topology
Show description for 19b1ee2
russellb
authored and
Russell Bryant
committed
19b1ee2
View commit details
Copy full SHA for 19b1ee2
Browse repository at this point
fix(cni-sidecar): close egress-enforcement gaps from re-review
Show description for 0b9085d
russellb
authored and
Russell Bryant
committed
0b9085d
View commit details
Copy full SHA for 0b9085d
Browse repository at this point
fix(cni-sidecar): harden readiness lifecycle, init, and IPv6 detection
Show description for da32f5d
russellb
authored and
Russell Bryant
committed
da32f5d
View commit details
Copy full SHA for da32f5d
Browse repository at this point
fix(cni-sidecar): make the CNI installer a cluster singleton
Show description for ea414ae
russellb
authored and
Russell Bryant
committed
ea414ae
View commit details
Copy full SHA for ea414ae
Browse repository at this point
fix(cni-sidecar): drop brittle owner guard, upgrade any openshell-cni entry in place
Show description for bcdec5f
russellb
authored and
Russell Bryant
committed
bcdec5f
View commit details
Copy full SHA for bcdec5f
Browse repository at this point
fix(cni-sidecar): harden sidecar init, scope API lookups, gate reboots
Show description for c207273
russellb
authored and
Russell Bryant
committed
c207273
View commit details
Copy full SHA for c207273
Browse repository at this point
docs(cni-sidecar): correct multi-release workflow, boot-taint, and singleton docs
Show description for 8396e40
russellb
authored and
Russell Bryant
committed
8396e40
View commit details
Copy full SHA for 8396e40
Browse repository at this point
feat(cni-sidecar): auto-aggregate sandbox namespaces into the CNI allowlist
Show description for d4d8115
russellb
authored and
Russell Bryant
committed
d4d8115
View commit details
Copy full SHA for d4d8115
Browse repository at this point
feat(cni-sidecar): Helm-owned registration marker + wait-for-ack gate
Show description for 1205a36
russellb
authored and
Russell Bryant
committed
1205a36
View commit details
Copy full SHA for 1205a36
Browse repository at this point
fix(cni): harden cni-sidecar egress enforcement
Show description for 352f32d
russellb
authored and
Russell Bryant
committed
352f32d
View commit details
Copy full SHA for 352f32d
Browse repository at this point
fix(cni): correct k3s CNI bin path and stale registration docs
Show description for a9d5f8b
russellb
authored and
Russell Bryant
committed
a9d5f8b
View commit details
Copy full SHA for a9d5f8b
Browse repository at this point
chore: stop tracking docs/superpowers scratch dir
Show description for 78cc628
russellb
authored and
Russell Bryant
committed
78cc628
View commit details
Copy full SHA for 78cc628
Browse repository at this point
feat(cni): standalone CNI-only install mode for independent lifecycle
Show description for dd774a1
russellb
authored and
Russell Bryant
committed
dd774a1
View commit details
Copy full SHA for dd774a1
Browse repository at this point
docs(cni): point OpenShift multi-gateway guidance at standalone CNI
Show description for 79478a3
russellb
authored and
Russell Bryant
committed
79478a3
View commit details
Copy full SHA for 79478a3
Browse repository at this point
fix(cni): review fixes + fail-closed contract-version gate
Show description for b839bfe
russellb
authored and
Russell Bryant
committed
b839bfe
View commit details
Copy full SHA for b839bfe
Browse repository at this point
docs(rfc): cover CNI contract versioning for mixed-version clusters
Show description for ae189f4
russellb
authored and
Russell Bryant
committed
ae189f4
View commit details
Copy full SHA for ae189f4
Browse repository at this point
fix(cni): handle CniSidecar in upstream-proxy-auth secret mode
Show description for ced96d1
russellb
authored and
Russell Bryant
committed
ced96d1
View commit details
Copy full SHA for ced96d1
Browse repository at this point
fix(helm): skip Agent Sandbox preflight in cni-only mode
Show description for b9a43fa
russellb
committed
b9a43fa
View commit details
Copy full SHA for b9a43fa
Browse repository at this point
fix(cni): satisfy Rust 1.95 clippy lints in the CNI plugin
Show description for 3d0799f
Russell Bryant
committed
3d0799f
View commit details
Copy full SHA for 3d0799f
Browse repository at this point
You can’t perform that action at this time.
