| Version | Supported |
|---|---|
main branch |
yes |
| tagged releases | best effort |
Do not open public GitHub issues for security vulnerabilities.
Report via a private GitHub security advisory on this repository or virtfoundry/core. Primary contact: Matheus Thurler (@Matheus-Thurler) — see MAINTAINERS.md.
Include the affected component (the VKSCluster CRD, the controller, and its Helm chart), impact, reproduction steps, and a suggested fix if any.
We aim to acknowledge within 7 days.
- Pin the controller image by digest in production overlays; do not deploy
:latest. - The controller reconciles control-plane Services and tenant Instances; report any path that lets one tenant affect another tenant's cluster.