OpenSandbox

vdocker/ingress/v1.0.8 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 1mo Containers & Orchestration

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai ai-agent ai-infra kubernetes sandbox

Affected surfaces

auth

Summary

AI summary

Updates 🐛 Bug Fixes, ✨ Features, and What's New across a mixed release.

Full changelog

OTLP endpoint auto-discovery from node IP — When no OTEL_EXPORTER_OTLP_METRICS_ENDPOINT or OTEL_EXPORTER_OTLP_ENDPOINT is configured, ingress now resolves the node IP from the HOST_IP env var (then /etc/hostinfo as fallback) and points the OTLP/HTTP exporter at <node-ip>:4318 over plaintext. This lets ingress emit metrics in environments where only a node IP is available, without requiring callers to template the full endpoint URL. (#963)

WebSocket proxy forwards all headers — Replaced the hardcoded header whitelist (Origin, Sec-WebSocket-Protocol, Cookie) with a blacklist approach that forwards all headers except hop-by-hop (RFC 7230 §6.1) and dialer-managed WebSocket handshake headers. This fixes X-EXECD-ACCESS-TOKEN being silently dropped, which caused execd to return 401 on PTY WebSocket connections through ingress URI mode. (#1058)

Thanks to these contributors ❤️

Docker Hub: opensandbox/ingress:v1.0.8
Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/ingress:v1.0.8

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track OpenSandbox

Get notified when new releases ship.

About OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.