Taylor Mutch cd0477fb23 fix(kubernetes): preserve process identity in sidecar topology ...

Render sidecar pods with a shared process namespace, keep binary-aware network policy enabled, and move Kubernetes sidecar settings under the nested sidecar config table.

Also apply unprivileged Landlock/seccomp setup in NetworkOnly supervisor mode so sidecar topology keeps sandbox child hardening without privileged process setup.

Signed-off-by: Taylor Mutch <taylormutch@gmail.com>

2026-07-08 12:12:35 -07:00

..

_components

docs: refresh landing terminal demo and apply NVIDIA fern theme (#1615)

2026-05-28 13:44:02 -07:00

about

docs: add Hermes Agent to supported agents table (#2131)

2026-07-03 17:55:26 +00:00

get-started

docs(container-gateway): fix Docker driver setup for containerized gateway (#1419)

2026-06-03 09:41:41 -07:00

kubernetes

fix(kubernetes): preserve process identity in sidecar topology

2026-07-08 12:12:35 -07:00

observability

feat(policy): add agentic approval loop (#1528)

2026-05-29 21:11:31 -07:00

providers

feat(sandbox): proxy-side AWS SigV4 credential signing for CONNECT tunnels (#1638)

2026-06-26 10:52:24 -07:00

reference

fix(kubernetes): preserve process identity in sidecar topology

2026-07-08 12:12:35 -07:00

resources

docs(fern): move published docs into docs tree (#796)

2026-04-09 15:02:27 -07:00

sandboxes

docs(mcp): fix granular policy lifecycle examples (#2066)

2026-06-30 13:36:37 -07:00

security

docs: warn to redact credentials from log output before sharing (#2124)

2026-07-06 10:19:25 -07:00

.markdownlint-cli2.jsonc

fix(docs): scope fenced code language linting (#965)

2026-04-24 14:23:31 -07:00

CONTRIBUTING.mdx

docs(config): update gateway config reference (#1624)

2026-05-28 20:51:06 -07:00

index.mdx

docs: refresh landing terminal demo and apply NVIDIA fern theme (#1615)

2026-05-28 13:44:02 -07:00

index.yml

feat(providers): add Google Vertex AI inference provider (#1568)

2026-06-02 10:45:50 -05:00