Vouch Request: kon-angelo

[kon-angelo]

I would like to contribute to OpenShell. I have been working on sandbox ingress support — exposing services running inside the sandbox network namespace to the Kubernetes cluster via iptables DNAT rules.

I filed #994 as a feature request for this capability. I have a working prototype on a local branch that implements the kernel-level plumbing (DNAT rules, IP forwarding with /proc/sys remount fallback, K8s driver containerPort declarations) and I am ready to open a PR once vouched.

I am also a co-author on #981 (split supervisor/agent into separate pods with gVisor isolation) and #899 (restricted SecurityContextConstraints support).

My background is in Kubernetes platform engineering — I work on the Gardener project and have experience with container networking, network namespaces, and iptables.