Issues

• [bug-bash] Deleted-and-recreated atespace can inherit its previous owner (or be deleted by its previous owner)

  kind/bug
  agent-substrate/substrate#3255 · Filter by author thompsonmax opened on Oct 26, 2026

• [Bug Bash] Install a new SandboxConfig per release instead of updating the class default in place

  agent-substrate/substrate#3253 · Filter by author zoez7 opened on Oct 26, 2026
  

• microvm: bump cloud-hypervisor to v54.0

  agent-substrate/substrate#3250 · Filter by author ajaysundark opened on Oct 26, 2026
  1

• Publish release images for tagged releases

  agent-substrate/substrate#3246 · Filter by author bpross opened on Oct 26, 2026

• Containers always run as root: image USER is ignored and there is no runAsUser

  agent-substrate/substrate#3245 · Filter by author bpross opened on Oct 26, 2026

• ActorTemplate: support host aliases for containers

  agent-substrate/substrate#3244 · Filter by author bpross opened on Oct 26, 2026

• Egress: explicit TCP rules for named in-cluster services (databases, brokers)

  agent-substrate/substrate#3243 · Filter by author bpross opened on Oct 26, 2026

• [bug bash] Actor logs are controlled by Kubernetes RBAC on the pool namespace, not atespace roles

  area/cliarea/securitybug-bashkind/docs
  agent-substrate/substrate#3242 · Filter by author SHRUTI6991 opened on Oct 26, 2026

• [bug bash] Revoking access to a template in another atespace doesn't stop actors already using it

  area/securitybug-bashkind/bug
  agent-substrate/substrate#3241 · Filter by author SHRUTI6991 opened on Oct 26, 2026

• [FEATURE] Add an ate-setup render command

  area/dev-infrakind/featureprio/P0
  Feature

  agent-substrate/substrate#3240 · Filter by author stshrive opened on Oct 26, 2026

• [bug bash] ate-api-server accepts tokens of deleted ServiceAccounts

  area/identityarea/securitybug-bashkind/bug
  agent-substrate/substrate#3238 · Filter by author SHRUTI6991 opened on Oct 26, 2026

• [bug-bash] gVisor runsc logs for app containers are tagged with the app's container name instead of _sandbox

  area/gvisorarea/observabilitybug-bashkind/bugprio/P2
  agent-substrate/substrate#3236 · Filter by author git286 opened on Oct 26, 2026

• [Bug Bash] doc: authorization.md says golden tags skip can_use_tag, but onSourceTag checks every source_tag.

  area/securitybug-bashkind/docs
  agent-substrate/substrate#3235 · Filter by author SHRUTI6991 opened on Oct 26, 2026

• [Bug Bash] ReportActorCrashed is in registry.go but missing from the WorkerService table in authorization.md.

  bug-bashkind/docs
  agent-substrate/substrate#3234 · Filter by author SHRUTI6991 opened on Oct 26, 2026

• [bug-bash] README and setup-gcp conflicts on Kubernetes beta APIs enablement

  bug-bashkind/docs
  agent-substrate/substrate#3233 · Filter by author HavenXia opened on Oct 26, 2026

• [Bug Bash] A binding with a trailing space is accepted and silently matches nobody.

  area/securitybug-bashkind/bug
  agent-substrate/substrate#3232 · Filter by author SHRUTI6991 opened on Oct 26, 2026

• [Bug bash] Streaming RPCs skip authorization; only login is checked.

  area/securitybug-bashkind/bug
  agent-substrate/substrate#3231 · Filter by author SHRUTI6991 opened on Oct 26, 2026

• [bug-bash] ResumeActor attempts ROOTFS restore across CPU architectures instead of dropping to VOLUMES

  agent-substrate/substrate#3230 · Filter by author shrutiyam-glitch opened on Oct 26, 2026
  2

  

• kubectl ate suspend actor --mode=sync on a suspended actor returns success while the snapshot is still only on the node

  area/api-machineryarea/nodebug-bash
  agent-substrate/substrate#3229 · Filter by author HavenXia opened on Oct 26, 2026

• [Bug Bash] Blocked egress looks like a DNS failure

  area/networkarea/observabilitybug-bashkind/bug
  agent-substrate/substrate#3228 · Filter by author SHRUTI6991 opened on Oct 26, 2026

• [bug-bash] hack/teardown.sh --all removes project-wide IAM grants and the shared transfer service account

  area/dev-infrabug-bash
  agent-substrate/substrate#3227 · Filter by author HavenXia opened on Oct 26, 2026

• Track gVisor / microVM parity gaps for 1.0

  area/gvisorarea/microVM
  agent-substrate/substrate#3226 · Filter by author BenTheElder opened on Oct 26, 2026
  6

  

• [bug-bash] README and demo walkthroughs port-forward atenet-router port 80

  area/demosarea/networkbug-bash
  agent-substrate/substrate#3225 · Filter by author HavenXia opened on Oct 26, 2026

• [Bug-bash] kubectl ate: warn when deleting a RUNNING actor

  area/clibug-bashkind/bugprio/P2
  agent-substrate/substrate#3222 · Filter by author git286 opened on Oct 26, 2026

• [bug-bash] ate-setup deploy ate-system is not idempotent: atenet-router and atenet-egress restart on every run

  area/networkbug-bashkind/bugprio/P2
  agent-substrate/substrate#3219 · Filter by author git286 opened on Oct 26, 2026