Issues

• feat(telemetry): tune sampling and add metric↔trace exemplars

  area/observabilitykind/enhancement
  kubewarden/runtime-enforcer#1005 · Filter by author dottorblaster opened on Oct 19, 2026

• feat(controller): trace the learning→WorkloadPolicyProposal path (T4)

  area/observabilitykind/feature
  kubewarden/runtime-enforcer#1004 · Filter by author dottorblaster opened on Oct 19, 2026

• feat(workloadpolicyhandler): open a span LINKED (not parent-child; nodes are parallel) to the annotation when loading policy into the BPF map

  area/observabilitykind/feature
  kubewarden/runtime-enforcer#1003 · Filter by author dottorblaster opened on Oct 19, 2026

• feat(webhook): stamp a traceparent annotation on the WorkloadPolicy CRD at admission

  area/observabilitykind/feature
  kubewarden/runtime-enforcer#1002 · Filter by author dottorblaster opened on Oct 19, 2026

• feat(eventscraper): head sampling at source — reuse the existing logRateLimiter (x/time/rate) pattern; AlwaysSample PROTECT mode, low ratio MONITOR; document collector tail_sampling

  area/observabilitykind/feature
  kubewarden/runtime-enforcer#1001 · Filter by author dottorblaster opened on Oct 19, 2026

• feat(metrics): add violation_buffer_depth, violation_buffer_drops_total, ringbuf_drain_lag_seconds

  area/observabilitykind/feature
  kubewarden/runtime-enforcer#1000 · Filter by author dottorblaster opened on Oct 19, 2026

• feat(bpf): add __u64 ktime (bpf_ktime_get_ns) to struct event + ProcessEvent; use as back-dated detection span start

  area/observabilitykind/feature
  kubewarden/runtime-enforcer#999 · Filter by author dottorblaster opened on Oct 19, 2026

• feat(controller): on scrape, ExtractNATS-style continue the context as a child/link covering enrich→patch

  area/observabilitykind/feature
  kubewarden/runtime-enforcer#998 · Filter by author dottorblaster opened on Oct 19, 2026

• feat(eventscraper): mint a detection SpanContext at violation birth; serialize it into the record via a TextMapCarrier modeled on sbomscanner's InjectNATS

  area/observabilitykind/feature
  kubewarden/runtime-enforcer#997 · Filter by author dottorblaster opened on Oct 19, 2026

• feat(proto): add traceparent/tracestate to ViolationRecord

  area/observabilitykind/feature
  kubewarden/runtime-enforcer#996 · Filter by author dottorblaster opened on Oct 19, 2026

• feat(controller): root span on the WorkloadPolicyStatusSync tick with a per-agent child span around each ScrapeViolations call

  area/observabilitykind/feature
  kubewarden/runtime-enforcer#995 · Filter by author dottorblaster opened on Oct 19, 2026

• feat(grpcexporter): add otelgrpc ServerHandler (agent) + ClientHandler (controller) using scope.Tracer

  area/observabilitykind/feature
  kubewarden/runtime-enforcer#994 · Filter by author dottorblaster opened on Oct 19, 2026

• feat(telemetry): route slog through NewTraceContextHandler in both binaries

  area/observabilitykind/enhancement
  kubewarden/runtime-enforcer#993 · Filter by author dottorblaster opened on Oct 19, 2026

• refactor(metrics): expose the existing active_violations gauge (and future controller-runtime metrics) via the OTel Prometheus bridge MetricProducer

  area/observabilitykind/enhancement
  kubewarden/runtime-enforcer#992 · Filter by author dottorblaster opened on Oct 19, 2026

• chore(chart): update Helm chart to set OTEL_EXPORTER_OTLP_* env + mount certs accordingly

  area/observabilitykind/chore
  kubewarden/runtime-enforcer#991 · Filter by author dottorblaster opened on Oct 19, 2026

• refactor(metrics)!: migrate metrics config from explicit params to standard OTEL_EXPORTER_OTLP_* env vars

  area/observabilitykind/breaking-changekind/feature
  kubewarden/runtime-enforcer#990 · Filter by author dottorblaster opened on Oct 19, 2026

• feat(telemetry): add a local internal/telemetry package

  area/observabilitykind/feature
  kubewarden/runtime-enforcer#989 · Filter by author dottorblaster opened on Oct 19, 2026

• feat(telemetry): distributed tracing & observability rollout

  area/observabilitykind/feature
  kubewarden/runtime-enforcer#988 · Filter by author dottorblaster opened on Oct 19, 2026

• Feature Request: Need default workloadPolicy for runtime-enforcer pods

  kubewarden/runtime-enforcer#926 · Filter by author venkateshjayagopal opened on Sep 24, 2026
  3

  

• Dependency Dashboard

  kubewarden/runtime-enforcer#889 · Filter by author renovate opened on Sep 10, 2026

• Move everything to the kubewarden org

  Task

  kubewarden/runtime-enforcer#871 · Filter by author dottorblaster opened on Sep 3, 2026
  

• docs: need to clarify the support for 100 executables limitation under WLP and WLPP

  documentation
  Task

  kubewarden/runtime-enforcer#854 · Filter by author venkateshjayagopal opened on Sep 1, 2026

• runtime-enforcer-agent enters unrecoverable CrashLoopBackOff when encountering an orphaned WorkloadPolicy annotation on a pod

  bug
  kubewarden/runtime-enforcer#853 · Filter by author davideiori1 opened on Sep 1, 2026
  2

  

• docs: document violation acknowledgement

  documentation
  kubewarden/runtime-enforcer#847 · Filter by author dottorblaster opened on Aug 27, 2026

• feat: expose Ready node names in WorkloadPolicy status

  enhancement
  Feature

  kubewarden/runtime-enforcer#821 · Filter by author dottorblaster opened on Aug 11, 2026 · Backlog