ack-agent-identity-Container Service for Kubernetes(ACK)-阿里云帮助中心

ack-agent-identity is a core part of the Agent Sandbox security solution, providing Agent Sandboxes with the identity credentials and egress-credential management they need to run securely.

Overview

Integrating the ack-agent-identity add-on issues independent identity credentials for Agent Sandboxes and applies fine-grained management to their egress access credentials, improving sandbox access security.

Usage

To learn how to use the ack-agent-identity add-on, see Configure credential injection for Agent Sandbox.

Release history

July 2026

Version

Release date

Description

Impact

0.4.0

July 22, 2026

Added support for distributing STS credentials required for dynamic OSS mounting.
Added support for OAuth2 authorization flow integration.

Upgrade failures may result in identity issuance or credential retrieval failures. Upgrade during off-peak hours.

0.3.0

July 9, 2026

Upgraded the Go version used by the add-on to 1.25.12 to improve stability.
Fixed an installation failure on clusters running Kubernetes 1.30 and 1.31.

June 2026

Version	Release date	Description	Impact
0.2.0	June 15, 2026	Optimized add-on memory usage.	Upgrade failures may result in identity issuance or credential retrieval failures. Upgrade during off-peak hours.
0.2.0-beta.5	June 10, 2026	Initial release.	No impact on business operations.