Evan Baker

Sign container images

3

**Is your feature request related to a problem? Please describe.** Images pushed to GHCR are not signed. **Describe the solution you'd like** Images pushed to GHCR should be signed to...

Prunes any non-release image tags from the container registry daily at 00:00Z. "non-release" tags include: - SemVer prelease such as `:v1.2.3-6f5089b0` suffixed tags - bare commit tags such as `:6f5089b0`...

Contributing documentation needs to be updated to explain that this project requires: - [ ] all commits to be [cryptographically signed](https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits) - [ ] all commits to have a DCO...

Windows CodeQL runs [take almost 10x longer](https://github.com/microsoft/retina/actions/runs/8497015180/job/23279467083) than the Linux variant and are the biggest chunk of CI time by far. Why? Can this be improved?

Document integration with AKS VSCode plugins

1

https://github.com/Azure/vscode-aks-tools/pull/624 Should be added to our documentation as a way to use Retina

AzBlob (and future OutputLocation) Config should be passed through ConfigMaps and Secrets

3

**Is your feature request related to a problem? Please describe.** Currently the AzBlob OutputLocation is provided via a [URL with an embedded SAS token](https://github.com/microsoft/retina/blob/29863599d5fa295fd59ae1baec21d108c5b7c907/crd/api/v1alpha1/capture_types.go#L139-L141). This URL is used as the...

fix: move CNS to distroless-iptables base image

4

**Reason for Change**: CNS was moved from `scratch` to `mariner` in [this change](https://github.com/Azure/azure-container-networking/pull/1499/files#diff-505c5d2f3910d5791524e206cc08abca53a8eefac1094baf678cd5d2b5dbf9e0) where we migrated responsibility to CNS to write some iptables rules. This change moves CNS to the...

Moves the E2E to a separate GHA to logically separate it from other checks

Introduce staging tiers for plugns

2

Some plugins are more production ready than others. We should group them to indicate their stability: ``` -plugins/ |-stable/ |-experimental/ ``` this will also require config changes

# Description Updates the k8s dependencies. ## Related Issue If this pull request is related to any issue, please mention it here. Additionally, make sure that the issue is assigned...