kata-containers · Issues· 1176 open

genpolicy: panics instead of erroring when an env var references a Secret that was not supplied

genpolicy: support container images without PATH env var

kata-deploy: helm chart does not apply imagePullSecrets to the verification and RBAC cleanup jobs

runtime: make SEV-SNP guest CPU model configurable (cpu_model)

runtime: a hugepage-backed guest ignores the pod's hugepage declaration

runtime-rs CLH VM factory rejects required shared_fs=none configuration

runtime-rs Dragonball VM template cannot save image-backed PCI virtio-blk state

runtime-rs: Lack of atomicity in the block device hotplugging operation causing "Duplicate nodes" errors.

genpolicy: unit test cases should have provenance information

runtime: physical VF restore races QEMU exit during normal sandbox teardown

runtime-rs: every CH raw disk is preallocated to its full size since #13292

TDX: kata-deploy OVMF eagerly accepts all guest memory — large-memory CC pods (≥64GB) hang at boot, exceed 1200s timeout

kata-deploy ignores k8sDistribution=k3s when the systemd unit has a custom name

runtime-rs: Support Pod-level checkpoint and restore with sandbox service

kata-deploy: install never removes artifacts absent from the new payload → stale confidential initrd persists across in-place upgrades