feat(kubernetes): add sidecar sandbox topology#2016

Draft

TaylorMutch wants to merge 7 commits into

mainfrom

feat/kubernetes-sidecar-topology

Commits on Jun 26, 2026

feat(policy): accept numeric UIDs in sandbox process identity validation

sjenning
authored and
TaylorMutch
committed
feat(supervisor): accept numeric UIDs for process identity dropping

sjenning
authored and
TaylorMutch
committed
feat(driver-kubernetes): resolve sandbox UID/GID from config or OpenShift SCC annotations

sjenning
authored and
TaylorMutch
committed
feat(driver-vm): add configurable sandbox UID/GID and update docs/examples

sjenning
authored and
TaylorMutch
committed
feat(kubernetes): add sidecar supervisor topology
TaylorMutch
committed
feat(kubernetes): reduce sidecar agent privileges
TaylorMutch
committed
docs(kubernetes): document sandbox topology
TaylorMutch
committed