Drew Newberry 86d7b3d6b8 refactor(vm): eliminate host-side kubectl dependency from boot pipeline ...

Remove all kubectl calls from the host-side boot sequence, eliminating
the need to forward port 6443 (kube-apiserver) outside the VM.

Changes:
- wait_for_gateway_service: TCP probe only (30051), no kubectl pod check
- bootstrap_gateway: cold boot writes TLS secret manifests via virtio-fs
  into k3s auto-deploy dir instead of kubectl apply
- bootstrap_gateway: warm boot skips namespace wait (TCP probe suffices)
- recover_stale_pods: removed entirely (gateway-init.sh already cleans
  containerd runtime/sandbox state, CNI state, and network namespaces)
- Kubeconfig copy moved to best-effort post-readiness (for debugging)
- Port 6443 removed from gvproxy port_map

Removed functions: recover_stale_pods, wait_for_namespace,
apply_tls_secrets, kubectl_apply.

Net: -362 lines, +147 lines. No kubectl binary required on host.

2026-03-24 11:08:17 -07:00

..

runtime

fix(vm): resolve CNI bridge and nftables errors for reliable pod networking

2026-03-24 10:22:53 -07:00

scripts

fix(vm): fix gateway readiness timeout with correct port mapping and aligned pre-bake

2026-03-24 10:32:30 -07:00

src

refactor(vm): eliminate host-side kubectl dependency from boot pipeline

2026-03-24 11:08:17 -07:00

tests

wip

2026-03-23 21:03:07 -07:00

Cargo.toml

wip

2026-03-23 18:23:55 -07:00

entitlements.plist

feat(vm): add navigator-vm crate with libkrun microVM and k3s gateway

2026-03-16 10:41:53 -07:00