Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Events
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
NVIDIA
OpenShell
Repository navigation
Code
Issues
384
(384)
Pull requests
206
(206)
Discussions
Actions
Projects
Security and quality
Insights
More
items
feat(kubernetes): add cni-sidecar supervisor topology
- #2606
#2606
Closed
russellb
wants to merge 29 commits into
NVIDIA:main
NVIDIA/OpenShell:main
from
russellb:feat/kubernetes-cni-sidecar-topology
russellb/OpenShell:feat/kubernetes-cni-sidecar-topology
Copy head branch name to clipboard
Conversation
Commits
29
(29)
Checks
Files changed
Closed
feat(kubernetes): add cni-sidecar supervisor topology
#2606
russellb
wants to merge 29 commits into
NVIDIA:main
NVIDIA/OpenShell:main
from
russellb:feat/kubernetes-cni-sidecar-topology
russellb/OpenShell:feat/kubernetes-cni-sidecar-topology
Copy head branch name to clipboard
Commits
Commits on Sep 8, 2026
feat(kubernetes): add cni-sidecar supervisor topology
Show description for 040024c
TaylorMutch
authored and
Russell Bryant
committed
040024c
View commit details
Copy full SHA for 040024c
Browse repository at this point
docs(cni): design for cni-sidecar on OpenShift Multus
Show description for e56d1f0
russellb
authored and
Russell Bryant
committed
e56d1f0
View commit details
Copy full SHA for e56d1f0
Browse repository at this point
feat(cni): add multus-chain install mode for OpenShift
Show description for 76b681f
russellb
authored and
Russell Bryant
committed
76b681f
View commit details
Copy full SHA for 76b681f
Browse repository at this point
feat(cni): add gated privileged SCC for OpenShift
Show description for cdc36e8
russellb
authored and
Russell Bryant
committed
cdc36e8
View commit details
Copy full SHA for cdc36e8
Browse repository at this point
feat(helm): add OpenShift cni-sidecar values overlay
Show description for b7f2f90
russellb
authored and
Russell Bryant
committed
b7f2f90
View commit details
Copy full SHA for b7f2f90
Browse repository at this point
docs(cni): document OpenShift multus-chain mode
Show description for 07d84a1
russellb
authored and
Russell Bryant
committed
07d84a1
View commit details
Copy full SHA for 07d84a1
Browse repository at this point
fix(cni): scope privileged SCC to a dedicated CNI service account
Show description for 202088a
russellb
authored and
Russell Bryant
committed
202088a
View commit details
Copy full SHA for 202088a
Browse repository at this point
feat(helm): add minimal sandbox SCC for OpenShift binary-aware policy
Show description for c791869
russellb
authored and
Russell Bryant
committed
c791869
View commit details
Copy full SHA for c791869
Browse repository at this point
docs(rfc): propose cni-sidecar supervisor topology
Show description for 103b387
russellb
authored and
Russell Bryant
committed
103b387
View commit details
Copy full SHA for 103b387
Browse repository at this point
docs(rfc): link topology PRs in cni-sidecar RFC
Show description for 7e3af74
russellb
authored and
Russell Bryant
committed
7e3af74
View commit details
Copy full SHA for 7e3af74
Browse repository at this point
fix(cni-sidecar): address review findings for OpenShift topology
Show description for 19b1ee2
russellb
authored and
Russell Bryant
committed
19b1ee2
View commit details
Copy full SHA for 19b1ee2
Browse repository at this point
fix(cni-sidecar): close egress-enforcement gaps from re-review
Show description for 0b9085d
russellb
authored and
Russell Bryant
committed
0b9085d
View commit details
Copy full SHA for 0b9085d
Browse repository at this point
fix(cni-sidecar): harden readiness lifecycle, init, and IPv6 detection
Show description for da32f5d
russellb
authored and
Russell Bryant
committed
da32f5d
View commit details
Copy full SHA for da32f5d
Browse repository at this point
fix(cni-sidecar): make the CNI installer a cluster singleton
Show description for ea414ae
russellb
authored and
Russell Bryant
committed
ea414ae
View commit details
Copy full SHA for ea414ae
Browse repository at this point
fix(cni-sidecar): drop brittle owner guard, upgrade any openshell-cni entry in place
Show description for bcdec5f
russellb
authored and
Russell Bryant
committed
bcdec5f
View commit details
Copy full SHA for bcdec5f
Browse repository at this point
fix(cni-sidecar): harden sidecar init, scope API lookups, gate reboots
Show description for c207273
russellb
authored and
Russell Bryant
committed
c207273
View commit details
Copy full SHA for c207273
Browse repository at this point
docs(cni-sidecar): correct multi-release workflow, boot-taint, and singleton docs
Show description for 8396e40
russellb
authored and
Russell Bryant
committed
8396e40
View commit details
Copy full SHA for 8396e40
Browse repository at this point
feat(cni-sidecar): auto-aggregate sandbox namespaces into the CNI allowlist
Show description for d4d8115
russellb
authored and
Russell Bryant
committed
d4d8115
View commit details
Copy full SHA for d4d8115
Browse repository at this point
feat(cni-sidecar): Helm-owned registration marker + wait-for-ack gate
Show description for 1205a36
russellb
authored and
Russell Bryant
committed
1205a36
View commit details
Copy full SHA for 1205a36
Browse repository at this point
fix(cni): harden cni-sidecar egress enforcement
Show description for 352f32d
russellb
authored and
Russell Bryant
committed
352f32d
View commit details
Copy full SHA for 352f32d
Browse repository at this point
fix(cni): correct k3s CNI bin path and stale registration docs
Show description for a9d5f8b
russellb
authored and
Russell Bryant
committed
a9d5f8b
View commit details
Copy full SHA for a9d5f8b
Browse repository at this point
chore: stop tracking docs/superpowers scratch dir
Show description for 78cc628
russellb
authored and
Russell Bryant
committed
78cc628
View commit details
Copy full SHA for 78cc628
Browse repository at this point
feat(cni): standalone CNI-only install mode for independent lifecycle
Show description for dd774a1
russellb
authored and
Russell Bryant
committed
dd774a1
View commit details
Copy full SHA for dd774a1
Browse repository at this point
docs(cni): point OpenShift multi-gateway guidance at standalone CNI
Show description for 79478a3
russellb
authored and
Russell Bryant
committed
79478a3
View commit details
Copy full SHA for 79478a3
Browse repository at this point
fix(cni): review fixes + fail-closed contract-version gate
Show description for b839bfe
russellb
authored and
Russell Bryant
committed
b839bfe
View commit details
Copy full SHA for b839bfe
Browse repository at this point
docs(rfc): cover CNI contract versioning for mixed-version clusters
Show description for ae189f4
russellb
authored and
Russell Bryant
committed
ae189f4
View commit details
Copy full SHA for ae189f4
Browse repository at this point
fix(cni): handle CniSidecar in upstream-proxy-auth secret mode
Show description for ced96d1
russellb
authored and
Russell Bryant
committed
ced96d1
View commit details
Copy full SHA for ced96d1
Browse repository at this point
fix(helm): skip Agent Sandbox preflight in cni-only mode
Show description for b9a43fa
russellb
committed
b9a43fa
View commit details
Copy full SHA for b9a43fa
Browse repository at this point
fix(cni): satisfy Rust 1.95 clippy lints in the CNI plugin
Show description for 3d0799f
Russell Bryant
committed
3d0799f
View commit details
Copy full SHA for 3d0799f
Browse repository at this point
You can’t perform that action at this time.
