Issues

Issues

• bug(e2e): file_transfer::upload_download_round_trip stalls on the k3s-ha conformance row

  NVIDIA/OpenShell#5520 · opened on Nov 12, 2026

• Use .gitignore also for downloads

  NVIDIA/OpenShell#5514 · opened on Nov 12, 2026

• bug(vm): on-failure restart never completes because the preserved overlay fails e2fsck

  NVIDIA/OpenShell#5507 · opened on Nov 12, 2026
  2

• feat(observability): export shared-supervisor traces and OCSF logs via OTLP

  NVIDIA/OpenShell#5505 · opened on Nov 12, 2026

• Helm chart: let the gateway Service be a configurable LoadBalancer (annotations, source ranges, a Service port separate from the gateway's listening port)

  NVIDIA/OpenShell#5500 · opened on Nov 11, 2026

• feat(kubernetes): inherit operator-assigned sandbox UID/GID from tenant namespaces

  Enhancement

  NVIDIA/OpenShell#5494 · opened on Nov 11, 2026
  2

• bug(kubernetes): a ResourceQuota or LimitRange rejecting the workspace PVC leaves the sandbox in Provisioning for 300 s with an unrelated message

  NVIDIA/OpenShell#5491 · opened on Nov 11, 2026

• refactor(triage): mark stale closures with stable metadata

  NVIDIA/OpenShell#5487 · opened on Nov 11, 2026

• Configurable sandbox concurrent-connection limit (MAX_NETWORK_STREAMS = 96), and a denial reason that names it

  NVIDIA/OpenShell#5486 · opened on Nov 11, 2026

• feat(docker): support workload image updates preserving sandbox identity and data

  NVIDIA/OpenShell#5484 · opened on Nov 11, 2026

• feat(helm): let OpenShift assign the gateway's UID and fsGroup without value overrides

  NVIDIA/OpenShell#5483 · opened on Nov 11, 2026

• feat: narrow filesystem access for child processes through the sandbox binary

  NVIDIA/OpenShell#5482 · opened on Nov 11, 2026

• The persistent storage of gateway is considered to be placed in ETCD/k8s CR

  NVIDIA/OpenShell#5481 · opened on Nov 11, 2026

• chore(sdk/ts): migrate the TypeScript SDK to ai-openshell/sdk-typescript

  NVIDIA/OpenShell#5480 · opened on Nov 11, 2026

• bug(kubernetes): sandboxes cannot start under the EKS Nitro Sandbox RuntimeClass because the workspace PVC is mounted at two paths

  NVIDIA/OpenShell#5476 · opened on Nov 10, 2026
  3

• Support Gateway-authenticated token grants with client-selected header formats

  NVIDIA/OpenShell#5473 · opened on Nov 10, 2026
  1

• test(perf): decide whether to bring back the live-Internet and data-path benchmarks

  NVIDIA/OpenShell#5472 · opened on Nov 10, 2026

• feat(observability): link sampled supervisor request spans to workload traces

  NVIDIA/OpenShell#5471 · opened on Nov 10, 2026

• feat(driver-mxc): support sandbox exec and restart on Windows

  NVIDIA/OpenShell#5468 · opened on Nov 10, 2026

• bug(sandbox): restrictive seccomp filter stacking remains blocked in v0.1.8 (follow-up to #4097)

  NVIDIA/OpenShell#5467 · opened on Nov 10, 2026

• feat(kubernetes): support caller-specified OCI image volumes in sandbox driver config

  NVIDIA/OpenShell#5463 · opened on Nov 10, 2026
  2

• bug: sandbox logs and watch streams ignore gateway ownership in multi-replica mode

  NVIDIA/OpenShell#5462 · opened on Nov 10, 2026

• bug(docker): deleting a sandbox while it is starting fails with "volume is in use"

  NVIDIA/OpenShell#5459 · opened on Nov 10, 2026

• bug: stop sandbox times out in Kubernetes E2E on Agent Sandbox v1alpha1

  NVIDIA/OpenShell#5457 · opened on Nov 10, 2026

• refactor: specify the boundary and supervisor-registration contracts compute drivers use

  NVIDIA/OpenShell#5456 · opened on Nov 10, 2026