From 8bfa59242758189ab14289050e65adf7940f3dc9 Mon Sep 17 00:00:00 2001 From: Karl Date: Sat, 27 Jun 2026 23:49:02 -0700 Subject: [PATCH] =?UTF-8?q?docs(backlog):=20Q232=20=E2=80=94=20cut=20GMC?= =?UTF-8?q?=20release=20v1.1.0-rc.3=20to=20unblock=20the=20dogfood?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The fixes the live dogfood session surfaced (Q227 PriorityClass quota, Q228 v2-controller startup, Q229 egress-DNS) are all merged to main but absent from any released image, so Q224/Q231 are blocked on a release that nothing tracked. File it as a ready S item at the top of the Queue — actionable now, unblocks both. Cut per operations/release.md. --- docs/STATUS.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/STATUS.md b/docs/STATUS.md index 89fe7c2b..f87a4cc9 100644 --- a/docs/STATUS.md +++ b/docs/STATUS.md @@ -52,6 +52,7 @@ Specific actionable items in priority order. Pick from the top; skip 🚫 items | ID | Item | Labels | St | Sz | Notes | |---|---|---|---|---|---| +| Q232 | [Cut GMC release v1.1.0-rc.3](operations/release.md) | `milestone` `infra` | 🔲 | S | Bundles Q227 (PriorityClass quota) + Q228 (v2-controller startup) + Q229 (egress-DNS), all merged to main. Unblocks Q224 + Q231 (the dogfood needs the egress-DNS fix in an image). Tag per release.md; verify publish.yml legs (build/sign/SBOM/chart). | | Q224 | [GKE dogfood: deploy + live GAG validation](plan/gke-dogfood.md) | `milestone` `infra` | 🚫 | M | Control plane validated live on GKE (GMC, v2 CRDs, gateway reconcile, AGC provisioned). 🚫 runner validation (job→pod→GitHub) needs a GMC release w/ Q227-Q229 (rc.2 lacks them); then bump GAG_IMAGE_TAG + dogfood-start. C2 follows; e2e is Q231. | | Q225 | [Operator docs: Kata Containers for DinD workloads](operations/in-runner-image-builds.md) | `docs` | 🚫 | S | 🚫 Q224. Document runtimeClassName: kata-qemu on podTemplate, /dev/kvm machine-type requirement (N2+ on GCP), and Kata DaemonSet setup. Extend in-runner-image-builds.md or new page depending on density. | | Q226 | [Kata Containers on GKE — secure CI reference architecture](plan/kata-on-gke.md) | `security` `infra` | 🚫 | M | 🚫 Q224. OSS untrusted-PR threat + GAG dogfood requirement rule out privileged DinD. Spike: GKE nested-virt node pool + Kata RuntimeClass: kind in micro-VM, no privileged pod. Reference arch. [plan](plan/kata-on-gke.md) |