OpenSandbox

vdocker/ingress/v1.0.7 Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

Published 28d Containers & Orchestration

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai ai-agent ai-infra kubernetes sandbox

Summary

AI summary

Ingress now watches sandbox CRs across all namespaces, deprecating the --namespace flag and rejecting ambiguous IDs.

Full changelog

Multi-namespace support: Ingress watches sandbox CRs across all namespaces instead of a single one. --namespace flag deprecated. Ambiguous sandbox IDs across namespaces are rejected. (#699)
Secure access routing (OSEP-0011): Added --secure-access-keys flag for signed URL verification. Sandboxes with opensandbox.io/secure-access require valid signatures; sandboxes without it continue to work with unsigned routes. (#761)
Log rotation: File log outputs auto-rotate via lumberjack (100MB, 30d, 10 backups default). (#791)

Proxy panic log now includes uri, host, method fields for debugging. (#802)
CodeQL static analysis fixes (integer conversion hardening in signature package). (#795)

Thanks to these contributors ❤️

Docker Hub: opensandbox/ingress:v1.0.7
Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/ingress:v1.0.7

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track OpenSandbox

Get notified when new releases ship.

About OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.