K Upadhyay

Hello, thanks for submitting this feature request! I've confirmed that Bottlerocket currently does not have this policy: - I searched [the Core-kit repo](https://github.com/bottlerocket-os/bottlerocket-core-kit) `selinux-policy` package and found no results -...

Hey @stevehipwell , this feature is tentatively planned for the `k8s-1.34` variant release, which can be tracked here: https://github.com/bottlerocket-os/bottlerocket/issues/4620

Hey @cristi- , thanks for submitting this request. Can you please share more details on your use-case for this? For example, do you need this config to persist on instance...

Thanks for sharing your use case. A host-container based approach is still quite hacky, and you will likely come across the same persistence issue on reboot as described in [this...

Hey @jcmcken , thanks for the renewed interest on this old issue! We will discuss within the team on how we want to move forward with this feature and then...

Getting back: In a normal scenario, we expect this value to be configurable at the network level (DHCP settings) rather than OS, so that is our current recommendation. However, we...

Force push above adds a new `0002-Always-restrict-boringcrypto-crypto-tls-to-FIPS.patch` -- thanks @arnaldo2792 !

^ Force push adds the latest Go 1.24 version 1.24.2 and also adds a commit updating the Go 1.23 version to 1.23.8. Reran the same tests stated in the description:...

Hey @snowzach , thanks for raising this concern. I agree at the moment it is cumbersome, but we are working on simplifying this process. Currently, my recommendation would be: -...

Hello, thanks for creating this issue. I'll raise this with the Bottlerocket team to determine if we can expose this setting. Can you please provide your use case in configuring...