Re:Katakate: Dozens of VMs per node for safe code exec: K8s+...
by gbxk on Wednesday October 22, 2025 @05:35AM
(#45666712)
This is an excellent point. I moved this to #1 on the TODO list.
I'll deny all DNS resolution by default until Cilium is integrated, if that passes the basic functionality tests.
I'll also add to the roadmap whilelist/deny for container pulling.
I'll also add to the roadmap whilelist/deny for container pulling.
Thanks!