Pull requests

• feat: renewable short-lived SA tokens for exported kubeconfigs

  #4227·wozniakjan opened Oct 20, 2026·

  ·
  4

• fix(pdb): scope the host selector to the virtual namespace and sync unhealthyPodEvictionPolicy

  #4226·blacksoxx opened Oct 20, 2026·3 tasks·

  ·
  2

• fix(services): sync internalTrafficPolicy, trafficDistribution and allocateLoadBalancerNodePorts on update

  #4222·blacksoxx opened Oct 19, 2026·3 tasks·

  ·
  1

• fix(syncer): apply translateImage to image volume references

  #4220·blacksoxx opened Oct 19, 2026·3 tasks·

  ·
  1

• fix(syncer): resize host pods only when the virtual resources changed

  #4218·blacksoxx opened Oct 19, 2026·3 tasks·

  ·
  1

• fix(syncer): reject projected clusterTrustBundle and podCertificate sources

  #4214·blacksoxx opened Oct 18, 2026·3 tasks·

  ·
  1

• fix(endpointslices): keep the translated service-name label on update

  #4213·pujitha24 opened Oct 16, 2026·3 tasks·

  ·
  1

  4

• fix(nodes): dedupe merged node taints by key and effect

  #4212·pujitha24 opened Oct 16, 2026·3 tasks·

  ·
  1

  2

• feat(cli): add --all flag to vcluster delete

  #4211·0xNiel opened Oct 15, 2026·2 of 3 tasks·

  ·
  1

  3

• fix(cli): pause and resume the deployed etcd with a StatefulSet control plane

  #4208·blacksoxx opened Oct 13, 2026·2 of 3 tasks·

  ·
  1

  3

• fix: oidc auth - invalid bearer token, errorCause invalid bearer token (swall...

  #4204·Roshan931 opened Oct 10, 2026·

  ·
  1

• fix(syncer): translate ephemeral container images

  #4203·kanywst opened Oct 10, 2026·

  ·
  1

• fix(syncer): exclude Argo Rollouts managed-by annotation from service sync

  #4196·chrisjohnson opened Oct 7, 2026Contributor·

  ·
  1

• [v0.19] chore: bump minimum platform version to v3.3.4

  #4195·deniseschannon opened Oct 6, 2026Contributor·2 tasks·

  ·

• fix(pods): cap translated DNS nameservers and search domains to host limits

  #4193·divbell opened Sep 30, 2026·

  ·

• fix(endpointslices): keep the service-name label within the 63-byte limit for selector-less Services

  #4192·divbell opened Sep 30, 2026·

  ·
  3

• fix: refuse to rotate an externally issued CA without --force

  #4191·noexecstack opened Sep 29, 2026·

  ·
  7

• fix(syncer): skip load balancer status for headless mappings

  #4186·avinashgola opened Sep 20, 2026·

  ·
  1

• fix(servicesync): check target Service is LoadBalancer before syncing status.loadBalancer (#4154)

  #4178·Tyagiquamar opened Sep 13, 2026·

  ·
  1

  1

• fix: treat only NotFound as success in delete --wait

  #4177·SebTardif opened Sep 12, 2026·

  ·

• fix: authorize node sync-back and skip unmanaged host patches

  #4176·SebTardif opened Sep 12, 2026·

  ·

• fix: redact helm registry password from execute errors

  #4175·SebTardif opened Sep 12, 2026·

  ·

• fix: authorize Service updates before host ExternalName intercept

  #4174·SebTardif opened Sep 12, 2026·

  ·

• [v0.37] chore: bump minimum platform version to v4.12.0

  #4173·deniseschannon opened Sep 9, 2026Contributor·

  ·
  1

• fix(kubelet-proxy): support IPv6 node service addresses

  #4169·immanuwell opened Sep 6, 2026Contributor·

  ·