Issues

• UnmountAllUnder reads all of /proc/self/mountinfo on every call, which contends with mounts on dense gVisor nodes

  agent-substrate/substrate#2950 · Filter by author pmandewalkar opened on Oct 20, 2026

• [Bug]: kubectl ate logs -f drops logs after pod migration or reconnect

  kind/bug
  agent-substrate/substrate#2949 · Filter by author ktsoator opened on Oct 20, 2026

• ateworker-microvm: serve shared snapshot restores as hard links instead of copies

  agent-substrate/substrate#2948 · Filter by author dberkov opened on Oct 20, 2026

• Add pre-upgrade safety checks and reusable policy evaluation

  agent-substrate/substrate#2941 · Filter by author tryambak2019 opened on Oct 20, 2026

• Disable IP forwarding in actor sandbox network namespaces

  area/networkarea/nodearea/securitykind/bug
  agent-substrate/substrate#2939 · Filter by author destijl opened on Oct 20, 2026
  2

  

• controlapi: synchronous suspend drops locality for a retained local checkpoint

  area/api-machinerykind/bug
  agent-substrate/substrate#2938 · Filter by author cloudonly opened on Oct 20, 2026
  

• Harden control plane manifests: securityContext, non-root images, narrower RBAC

  agent-substrate/substrate#2936 · Filter by author mikedickey opened on Oct 20, 2026
  1

• [Low] CSI plugin builds staging directories from storage_volume_id without a containment check

  area/securitykind/bug
  agent-substrate/substrate#2935 · Filter by author destijl opened on Oct 20, 2026

• [Low] NetworkPolicyName keeps only 20 bits of hash, so two WorkerPools can map to the same NetworkPolicy

  area/securitykind/bug
  agent-substrate/substrate#2934 · Filter by author destijl opened on Oct 20, 2026

• [Low] RemountReadOnly is non-recursive, so submounts under a recursively bound image volume stay writable

  area/microVMarea/securitykind/bug
  agent-substrate/substrate#2933 · Filter by author destijl opened on Oct 20, 2026
  

• [Low] CleanupSandboxState joins an unchecked id into paths it RemoveAll()s

  area/securitykind/bug
  agent-substrate/substrate#2932 · Filter by author destijl opened on Oct 20, 2026

• [Medium] agentgateway egress: TLS passthrough listener forwards without a substrateEgress policy

  area/securitykind/bug
  agent-substrate/substrate#2931 · Filter by author destijl opened on Oct 20, 2026
  

• [Medium] agentgateway egress: HTTP route authorizes the Host header but dials the CONNECT address, bypassing egress policy

  area/securitykind/bug
  agent-substrate/substrate#2930 · Filter by author destijl opened on Oct 20, 2026
  

• [Medium] ate-controller ServiceAccount can get/list/watch every Secret in the cluster

  area/securitykind/bug
  agent-substrate/substrate#2929 · Filter by author destijl opened on Oct 20, 2026

• [Medium] ate-controller and atenet-router accept any servicedns certificate as ate-api-server (empty --ateapi-server-name skips hostname verification)

  area/securitykind/bug
  agent-substrate/substrate#2928 · Filter by author destijl opened on Oct 20, 2026

• [Low] OIDC discovery transport sends the discovery bearer token to any host whose path is /openid/v1/jwks

  area/securitykind/bug
  agent-substrate/substrate#2921 · Filter by author destijl opened on Oct 19, 2026

• [Low] guestVolumeSource can map host paths containing ".." outside the microVM guest share

  area/securitykind/bug
  agent-substrate/substrate#2920 · Filter by author destijl opened on Oct 19, 2026
  

• [Low] setupImageVolumes builds host mount paths from vol.Name without a containment check

  area/securitykind/bug
  agent-substrate/substrate#2919 · Filter by author destijl opened on Oct 19, 2026

• [Low] ate-api-server accepts client certificates chained to system roots when --pod-identity-ca-certs is unset

  area/securitykind/bug
  agent-substrate/substrate#2918 · Filter by author destijl opened on Oct 19, 2026

• [Low] ate-setup's NFS CSI install for CI exposes the CSI controller over plaintext, unauthenticated TCP via a privileged socat sidecar

  area/securitykind/bug
  agent-substrate/substrate#2917 · Filter by author destijl opened on Oct 19, 2026
  1

  

• Docs: add verified AWS and Azure recipes for federating actor JWTs

  agent-substrate/substrate#2914 · Filter by author thompsonmax opened on Oct 19, 2026

• Move WorkerService under internal/proto

  area/apiarea/api-machinery
  Feature

  agent-substrate/substrate#2913 · Filter by author juli4n opened on Oct 19, 2026 · M3
  1

  

• Resume's detach should keep running after the caller leaves to finish upload large snapshots

  agent-substrate/substrate#2910 · Filter by author zoez7 opened on Oct 19, 2026
  

• ateapi: Remove WorkerPool informer and RBAC from ate-api-server

  agent-substrate/substrate#2901 · Filter by author shrutiyam-glitch opened on Oct 19, 2026
  

• Per-tenant credential isolation when atespaces are created at run time

  area/networkarea/securitykind/feature
  agent-substrate/substrate#2876 · Filter by author QuentinBisson opened on Oct 19, 2026