d/s merge, fix security in d/s - #343

Open

miheer wants to merge 46 commits into

openshift:mainfrom

miheer:security

Commits on Jun 3, 2026

Fix certificate rotation race condition in per-node certificates
bpickard22
committed
df3df81

Commits on Jun 28, 2026

fix(test): use unique temp file path in pkg/server tests
Basavaraju-G
committed
f80583b

Commits on Jul 21, 2026

Validate command file paths after Kubernetes bump
miheer
committed
ccc5c23

Commits on Jul 25, 2026

Bump google.golang.org/grpc from 1.79.3 to 1.82.1
dependabot[bot]
authored
574080f

Commits on Jul 30, 2026

Commits on Jul 31, 2026

Merge pull request #1522 from k8snetworkplumbingwg/dependabot/go_modules/golang.org/x/net-0.55.0
thomasferrandiz
authored
2e79055

Commits on Aug 4, 2026

Commits on Aug 5, 2026

Consolidate NoCertKeyError handling in isTransientCertError
bpickard22
committed
170af28

Commits on Aug 6, 2026

ci: add Multus node-density-cni e2e with PR performance reports
wizhaoredhat
committed
7daf4b2

Commits on Aug 7, 2026

Commits on Aug 10, 2026

Merge upstream multus-cni master into OpenShift main
miheer
committed
d0d5fae
Remove uncatchable SIGKILL from kubeconfig generator
miheer
committed
8ac7d5c
security: exclude vendored pkgbits from Snyk scan
miheer
committed
e2b726d
test: fix MonitorPluginConfiguration test to use temp dir for config output

thomasferrandiz
and
Copilot
committed
4ece2a0
Merge pull request #1534 from k8snetworkplumbingwg/thomasferrandiz-fix-monitor-plugin-config-test
thomasferrandiz
authored
5ff83ef
Remove vendor directory

thomasferrandiz
and
Copilot
committed
4ae0579
Update builds and workflows to not rely on vendor directory

thomasferrandiz
and
Copilot
committed
3679a3a

Commits on Aug 11, 2026

Merge pull request #1483 from bpickard22/cert-fix-upstream
bpickard22
authored
032c586
Centralize GitHub token/repo helpers
wizhaoredhat
committed
5175e5d
Merge pull request #1530 from wizhaoredhat/add_node_density_kube_burner_perf
bpickard22
authored
c5c0be9
This PR introduces graceful shutdown functionality to the Multus daemon by adding a /readyz endpoint

deads2k
authored and
wizhaoredhat
committed
47ca9df
fix readiness metrics label and clarify graceful shutdown signaling
wizhaoredhat
committed
7da1262
test api readiness endpoint behavior for readyz and healthz
wizhaoredhat
committed
6d1545a
Add brief comment for CmdDel
wizhaoredhat
committed
2a52e7f
fix readyz response header ordering in graceful shutdown handler
wizhaoredhat
committed
6473dd5

Commits on Aug 12, 2026

Handle test server errors explicitly in api readiness tests
wizhaoredhat
committed
63e71b5

Commits on Aug 13, 2026

Use rooted checks for kubeconfig inputs
miheer
committed
d2a5228
Defer kubeconfig file close
miheer
committed
b6e5c8d
Secure existing kubeconfig writes
miheer
committed
ab935a7
Restore conflist CNINetworkConfigList fast path and fix cached DEL without load cost
wizhaoredhat
committed
f4f5d2d
Seed conflist delegate Bytes from lossless libcni plugin JSON
wizhaoredhat
committed
bbd2b7c

Commits on Aug 14, 2026

Merge pull request #1525 from wizhaoredhat/gracefulterm
bpickard22
authored
19cd1ad

Commits on Aug 18, 2026

Merge pull request #1536 from wizhaoredhat/fix_regression
bpickard22
authored
96534b6

Commits on Aug 19, 2026

Use Ginkgo for kubeconfig generator test
miheer
committed
270f1e6
Cover fresh kubeconfig creation
miheer
committed
612ac86
Use named test framework imports
miheer
committed
712d950

Commits on Aug 20, 2026

Merge pull request #1529 from k8snetworkplumbingwg/thomasferrandiz-remove-vendor-folder
thomasferrandiz
authored
95a0932

Commits on Aug 24, 2026

Merge pull request #1524 from miheer/followup-PR-for-CORENET-7363
bpickard22
authored
27197cc

Commits on Aug 25, 2026

Merge upstream multus-cni master into OpenShift main
miheer
committed
4c91e29

Commits on Aug 26, 2026

security: update downstream Snyk exclusions
miheer
committed
c2644f9
build: use readonly module mode in downstream images
miheer
committed
34d2836