Issues

• Hero Demo Refresh - New Demo Video Needed

  agent-substrate/substrate#3327 · Filter by author brandonroyal opened on Oct 27, 2026

• [Bug]: ate-api-server rejects every token when the cluster's service account issuer is not kubernetes.default.svc

  kind/bug
  agent-substrate/substrate#3326 · Filter by author javajon opened on Oct 27, 2026

• MicroVM suspends wait on actor cleanup that could run in the background

  agent-substrate/substrate#3316 · Filter by author Nishanth29 opened on Oct 27, 2026
  2

• [Security]: podidentity signer should check the pod/SA/node in a PodCertificateRequest before signing

  area/securitykind/bug
  agent-substrate/substrate#3314 · Filter by author LiorLieberman opened on Oct 27, 2026

• Stale worker claim blocks actor resume after increasing template resources

  area/api-machinerybug-bash
  Bug

  agent-substrate/substrate#3311 · Filter by author juli4n opened on Oct 27, 2026

• [bug-bash] atenet-egress exports traces and metrics as service.name=atenet-router

  area/networkarea/observabilitybug-bashkind/bug
  agent-substrate/substrate#3308 · Filter by author JeffLuoo opened on Oct 27, 2026

• [bug-bash] Actor stdout and stderr are merged with no stream or severity, so plain-text errors are logged as INFO

  area/observabilitybug-bashkind/bugprio/P2
  agent-substrate/substrate#3307 · Filter by author baizhenyu opened on Oct 27, 2026

• [bug-bash] Cloud Logging: filtering on ate.actor.uid misses ateapi lifecycle and crash records (labels vs jsonPayload)

  area/observabilitybug-bashkind/bugprio/P2
  agent-substrate/substrate#3306 · Filter by author baizhenyu opened on Oct 27, 2026

• [Feature]: A checkpoint that stores an actor without suspending it

  agent-substrate/substrate#3299 · Filter by author whysosuresh opened on Oct 27, 2026

• Benchmark Success Gating

  area/benchmarkingkind/feature
  agent-substrate/substrate#3298 · Filter by author maxsmythe opened on Oct 27, 2026
  1

  

• Workload Installation Solution for Benchmarking

  area/benchmarkingkind/feature
  agent-substrate/substrate#3297 · Filter by author maxsmythe opened on Oct 27, 2026
  

• Unseeded singleton global AccessPolicy causes "kubectl ate get/update access-policy --global" to fail or print plain text on fresh clusters

  kind/cleanup
  agent-substrate/substrate#3294 · Filter by author moficodes opened on Oct 27, 2026
  1

• Cross-atespace TAG_SCOPE_PUBLISHED tags cannot be used by viewers of the publishing atespace because can_use_tag requires editor on parent_atespace

  agent-substrate/substrate#3293 · Filter by author moficodes opened on Oct 27, 2026

• kubectl ate get workers -a <atespace> and top worker -a <atespace> call global ListWorkers first, failing with PermissionDenied for atespace owners/editors/viewers

  agent-substrate/substrate#3292 · Filter by author moficodes opened on Oct 27, 2026

• AccessPolicy validation checks maxLength=512 before percent-encoding, causing 500 Internal when OpenFGA TupleKey.User exceeds 512 bytes

  agent-substrate/substrate#3291 · Filter by author moficodes opened on Oct 27, 2026
  

• CreateActorTemplate accepts 1 KiB memoryBytes (OOM-killing shared worker pod on wake), get resources -a <missing-atespace> exits 0, and CreateActor/DeleteAtespace hide missing resource details

  agent-substrate/substrate#3290 · Filter by author moficodes opened on Oct 27, 2026

• ateworker-gvisor wakeupprobe.WaitAll polls every 1ms without checking whether the container exited, retrying ~700 times per second for the full timeout and masking startup crashes as "connection refused"

  agent-substrate/substrate#3289 · Filter by author moficodes opened on Oct 27, 2026

• demos/egress/test-egress.sh negative identity check false-passes on a 130s NetworkPolicy timeout instead of testing TLS client-cert rejection

  agent-substrate/substrate#3288 · Filter by author moficodes opened on Oct 27, 2026

• demos/parking WorkerPool omits resources.limits (failing to trigger parking with 4 actors) and load.sh exits 0 reporting "0 failures" when 100% of requests fail

  agent-substrate/substrate#3287 · Filter by author moficodes opened on Oct 27, 2026

• actorjwt.Minter caches JWTs without actor UID (serving deleted actor's UID to recreated actors), and k8s-credential-provider /statusz drops secretSelector labels

  agent-substrate/substrate#3286 · Filter by author moficodes opened on Oct 27, 2026

• Deleting or updating EgressPolicy on a RUNNING actor leaves existing tlsPassthrough tunnels open indefinitely and breaks/bypasses pooled HTTP/2 connections

  agent-substrate/substrate#3285 · Filter by author moficodes opened on Oct 27, 2026

• kubectl-ate CLI & docs drift: get workers vs top worker identifier/unit mismatch, missing crash column in get actors, and stale worker/glossary docs

  agent-substrate/substrate#3284 · Filter by author moficodes opened on Oct 27, 2026

• CreateActor resolveTagSource formats the tag's own ActorTemplate UID instead of the target template's UID on mismatch

  agent-substrate/substrate#3283 · Filter by author moficodes opened on Oct 27, 2026

• k8s-credential-provider manifest is missing ate-otel-config envFrom, failing OTLP metric exports to [::1]:4317 / 127.0.0.1:4317 every 60s

  agent-substrate/substrate#3282 · Filter by author moficodes opened on Oct 27, 2026

• filecachegc.runPass suppresses eviction logs when FreedBytes < target and consecutiveShortfalls > 3

  agent-substrate/substrate#3281 · Filter by author moficodes opened on Oct 27, 2026