ACS 2026 release notes

Category

Feature

Description

Documentation

Agent Sandbox

Prometheus monitoring

ARMS Prometheus and self-managed Prometheus are now supported for collecting Agent Sandbox runtime metrics. You can configure a Grafana dashboard to monitor sandbox resources and runtime status in real time.

Enable Prometheus monitoring for ACS Agent Sandbox

enhanced egress traffic management

Fine-grained L7 egress traffic control is now available through the SecurityProfile CRD. You can define traffic-blocking rules based on domain names and URL paths to strengthen sandbox network security isolation.

Configure enhanced egress traffic management for Agent Sandbox

container restart

The ContainerRecreateRequest CRD now allows you to restart a specific container within a Pod without recreating the entire Pod, minimizing the impact of maintenance operations on your workloads.

Restart an Agent Sandbox container

multi-tenancy management (API key & team)

ack-sandbox-manager now supports API key and team management. Each team maps to a Kubernetes namespace for tenant isolation. Administrators can create and manage API keys for all teams, while regular tenants can only manage their own keys.

Multi-tenancy management

control plane and data plane traffic separation

SandboxGateway now enables independent forwarding of data plane traffic, separate from the control plane. This prevents control plane issues from impacting data plane stability.

Separate control plane and data plane traffic of an Agent Sandbox