ack-sandbox-manager

Version number

Date

Description

Impact

v0.6.11

August 19, 2026

• Features:

  • Egress traffic management supports using ConfigMaps as the data source for policy matching, which extends the policy parameter capabilities.

  • Supports accessing agent-runtime over mTLS. After you enable the compatibility switch enableTLS in the component deployment configuration, the system issues a server certificate for the created sandbox-agent, and sandbox-manager uses a client certificate to access agent-runtime over TLS.

  • When you claim a sandbox through SandboxClaim, the labels and annotations that you configured propagate to the finally created Pod. Internally reserved annotations are filtered out and are not leaked to the Pod.

  • Supports distributed tracing (OpenTelemetry) across the entire sandbox lifecycle.

  • Added the cluster-level security policy GlobalSecurityProfile.

  • Supports automatic refresh of AgenticFS storage credentials. Long-running sandboxes no longer become unavailable due to expired credentials.

  • Supports E2B network config (allowOut/denyOut).

  • Egress traffic security hardening: Before v0.6.11, when HTTP egress traffic managed by enhancedTrafficManagement was forwarded through the gateway, the gateway connected to the original destination address of the client request. If the request Host is inconsistent with the original destination IP address, a security risk may exist. For example, when a token is injected by using SecurityProfile, if the actually requested IP address and Host are inconsistent, the token may be sent to a target address that does not correspond to the Host, which causes leakage of sensitive information. Starting from v0.6.11, the gateway performs DNS resolution based on the request Host and connects to the resolved address instead of the original destination address of the client. This security hardening may cause traffic access failures in the following scenarios:

    • A self-managed DNS server is used to resolve internal domain names, but the egress gateway cannot obtain the same DNS resolution results.

    • The request Host is inconsistent with the original destination address of the client.

    • The client obtains the destination address through /etc/hosts, local DNS cache, DNS hijacking, or SDK service discovery.

• Bug fixes:

  • Fixed an issue where requests to the upstream failed after egress traffic was terminated by TLS.

  • Fixed the idToken propagation logic. After a new token is successfully issued, the old token file is removed, so that only one valid token is retained in the sandbox.

  • Fixed an issue where no traffic access token was issued for cloned sandboxes.

  • Fixed an issue where the manager could not start when the TrafficPolicy CRD was not installed in the cluster.

  • Corrected the priority of E2B traffic policies.

• Compatibility notes:

  • OpenKruise Agents community version v0.3.0.

After the upgrade, HTTP egress traffic managed by enhancedTrafficManagement is resolved through DNS based on the request Host and connects to the resolved address, instead of using the original destination address of the client. If you use self-managed DNS or the request Host is inconsistent with the original destination address, traffic access may fail. Read the changes carefully before upgrading.

v0.6.9

August 13, 2026

• Features:

  • Supports configuring, querying, and updating outbound network access rules for sandboxes during creation and runtime.

  • Supports server-side encryption of ACK Object Storage Service (OSS) volumes using customer-provided Key Management Service (KMS) keys.

  • Enables sandbox-manager to securely access TLS-capable agent-runtime over HTTPS or mutual TLS (mTLS).

• Bug fixes:

  • Fixed an issue where querying a claimed but not yet ready running sandbox incorrectly returned that the sandbox does not exist.

  • Fixed an issue where concurrent creation or deletion of API keys across multiple replicas could overwrite other keys.

  • Fixed an issue where the gateway's default traffic token request header was inconsistent with the E2B SDK. Custom clients using the old default request header must adjust accordingly or explicitly retain the old configuration.

  • Fixed an issue where dynamic storage mount credentials could be leaked through logs.

  • Fixed an issue where a sandbox cloned from a checkpoint could retain the source sandbox token and be identified with the wrong identity. The incorrect token file is now removed.

This upgrade does not affect your services. However, custom clients that use the old default traffic token request header must adjust accordingly or explicitly retain the old configuration.

Version number

Date

Description

Impact

v0.6.8

July 29, 2026

• Features:

  • Supports JSON Web Token (JWT) issuance. When a sandbox is claimed through the E2B protocol, a JWT Traffic Access Token is issued and returned to the client.

  • The gateway supports JWT signature verification based on Traffic Access Tokens.

  • The gateway adds a /readyz interface on port 7789 as an HTTP-based readiness probe, ensuring that ready status (200 OK) is returned only after the JWT Verifier starts.

  • Claimed sandboxes are labeled with the Owner ID (the ID of the API key).

  • Added the GlobalSecurityProfile resource.

  • SecurityProfile supports configuring priority using the priority field.

• Bug fixes:

  • Fixed a rare issue where creating or deleting a key could fail when using a Secret as the API key storage backend.

• Compatibility notes:

  • OpenKruise Agents version v0.3.0.

  • E2B SDK version 2.7.0 or later.

This upgrade does not affect your services.

v0.6.7

July 22, 2026

• Features:

  • Supports specifying the reclaim time for hibernated sandboxes: through the extended metadata e2b.agents.kruise.io/reserve-paused-sandbox-for during creation, or through the extended header x-e2b-kruise-reserve-paused-sandbox-for during hibernation. The default is 100 years (no deletion). Valid values are positive duration strings, such as 30m, 1h, and 240h.

  • Supports multi-domain access.

  • Supports Security Token Service (STS) token rotation under the E2B protocol for on-demand OSS storage mounting.

• Compatibility notes:

  • OpenKruise Agents version v0.3.0.

  • E2B SDK version 2.7.0 or later.

This upgrade does not affect your services.

v0.6.6

July 7, 2026

• Features:

  • Supports specifying a full name or a fixed prefix for a cloned sandbox using the extended metadata e2b.agents.kruise.io/sandbox-name and e2b.agents.kruise.io/sandbox-generate-name during cloning.

  • Supports setting quotas for API keys, including the number of sandboxes, total CPUs, and total memory.

  • Supports using sandbox-gateway for inbound traffic authentication of sandboxes.

  • The default data plane service for new clusters has been switched to sandbox-gateway.

• Optimizations:

  • Reduced log volume by approximately 70%.

  • Sandboxes that fail to be created are no longer retained during retries by default.

  • Added a label (agents.kruise.io/reserved-failed-sandbox) for filtering failed sandboxes. These sandboxes are no longer returned by the list, info, and other query interfaces.

• Bug fixes:

  • Fixed an issue where the list interface could not list all sandboxes in large-scale clusters.

• Compatibility notes:

  • OpenKruise Agents version v0.3.0.

  • E2B SDK version 2.7.0 or later.

This upgrade does not affect your services.

Version number

Date

Description

Impact

v0.6.5

June 17, 2026

• Features:

  • Updated the Envoy log format for sandbox-manager and sandbox-gateway to provide more detailed connection information.

  • sandbox-gateway now supports matching the upstream HTTP protocol with the downstream HTTP protocol.

  • Deleting sandboxes with a False Ready status is now supported.

• Optimizations:

  • When you use a secret as the storage backend for API keys, new keys take effect across all replicas almost instantly, with a possible millisecond-level delay.

  • The create interface no longer retries on non-retriable errors, such as quota limits, when creating a sandbox directly. It now returns an error immediately.

  • Added exponential backoff to the retry process of the create interface, which significantly reduces the number of retries for a single request.

• Bug fixes:

  • Fixed a rare issue where the snapshot interface could incorrectly report an error when creating a checkpoint, leading to an interface failure and checkpoint leaks.

  • Updated the Envoy base image version for sandbox-gateway to v1.37.3 to fix CVE-2026-27135 and CVE-2026-47774.

• Compatibility notes:

  • OpenKruise Agents version v0.3.0.

  • E2B SDK version 2.7.0 or later.

This upgrade does not affect your services.

v0.6.4

June 11, 2026

• Features:

  • Advanced traffic management:

    • Supports man-in-the-middle (MITM) interception of HTTPS requests in conjunction with ack-agent-identity.

    • SecurityProfile supports matching request schemes.

    • SecurityProfile supports audit webhooks.

    • SecurityProfile supports API key credential injection.

    • SecurityProfile supports Alibaba Cloud STS token injection.

• Compatibility notes:

  • OpenKruise Agents version v0.3.0.

  • E2B SDK version 2.7.0 or later.

This upgrade does not affect your services.

v0.6.3

June 9, 2026

• Features:

  • Removed the createPodInsteadOfSandbox feature.

  • Removed the default server-side timeouts for sandbox creation, including Claim Timeout and Wait Ready Timeout. These values are still configurable through metadata.

• Compatibility notes:

  • OpenKruise Agents version v0.3.0.

  • E2B SDK version 2.7.0 or later.

This upgrade does not affect your services.

v0.6.2

June 5, 2026

• Features:

  • Added support for E2B SDK versions 2.25.0 and later.

    • The create sandbox interface now enforces secure mode (accessToken authentication).

    • Added an E2B key compatibility layer. New keys are now returned in a format that passes E2B client-side validation. Existing keys and custom admin keys can also be converted to the compatible format without data loss.

  • Added support for persistent connections on the data plane, with a configurable idle timeout.

  • Added a delayed exit feature to sandbox-manager. During rolling upgrade, old-pod termination can optionally be delayed for a smoother traffic transition.

• Optimizations:

  • Extended the server-side Resume timeout to better handle large-scale resume scenarios under heavy load.

• Compatibility notes:

  • OpenKruise Agents version v0.3.0.

  • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

v0.6.1

June 1, 2026

• Features:

  • Supports Layer 7 egress traffic control. A new SecurityProfile API allows you to intercept requests to an egress gateway through the egress-control runtime and filter them based on HTTP request attributes such as path and method.

  • The create interface supports enabling sandbox IP address retrieval using the metadata e2b.agents.kruise.io/return-sandbox-ip: "true". For sandboxes created with this metadata, query interfaces such as create, list, and get_info return sandbox information that includes the metadata entry e2b.agents.kruise.io/sandbox-ip, which contains the IP address of the sandbox.

  • Supports HTTP access. HTTPS is not mandatory.

  • The create interface supports configuring resource limits for a sandbox at creation time using the e2b.agents.kruise.io/cpu-request and e2b.agents.kruise.io/cpu-limit metadata.

• Bug fixes:

  • Fixed a rare issue where a process could panic if a user disconnected immediately after calling the create interface.

  • Fixed an issue where an auto-paused sandbox could not be resumed using the connect interface.

• Compatibility notes:

  • OpenKruise Agents version v0.3.0.

  • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

Version number

Date

Description

Impact

v0.6.0

May 15, 2026

• Architecture refactoring:

  • Architecture upgrade: Completely refactored sandbox-manager using controller-runtime.

  • Optimized many existing implementations and improved test coverage to enhance correctness.

  • Fixed numerous non-critical issues that were transparent to users.

  • Removed the unnecessary internal Template Cache and SandboxSet Reconcile processes to improve claim performance and reduce memory consumption.

  • Rewrote the underlying wait mechanism to support concurrent monitoring of Kubernetes resource states in complex scenarios.

• Features:

  • Enhanced multi-tenancy capabilities: Added a Teams API to assign teams to an API key. Teams enable namespace-level resource isolation for different users (keys). Backward compatibility for existing keys with cluster-scoped permissions is maintained.

  • Pause/Resume optimizations: The pause and connect interfaces now support high concurrency calls. Multiple non-conflicting requests can merge their workflow status checks and return simultaneously without errors. Conflicting concurrent requests still fail. The resume operation (connect) now always correctly sets the timeout, even if the resume process fails.

  • Improved error messages: When the Create method fails, it returns detailed information for troubleshooting, often allowing you to identify the problem without checking logs.

• Compatibility notes:

  • OpenKruise Agents version v0.3.0.

  • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

Version number

Date

Description

Impact

v0.5.2

April 29, 2026

• Features:

  • Supports using MySQL as a storage backend for API keys.

  • Supports custom CDP ports when you use the BrowserUse API.

  • Supports list and get interfaces for templates.

  • sandbox-gateway supports graceful shutdown using a custom OpenKruise API.

  • Supports restoring dynamic storage mounts in checkpoint clone and resume scenarios.

  • Added a significant number of Prometheus metrics to sandbox-manager to support sandbox dashboards.

  • sandbox-manager now supports updating pod labels when claiming a sandbox.

• Performance optimizations:

  • Optimized the performance of dynamic storage mounts by supporting parallel mounting.

• Bug fixes:

  • Fixed an issue where a missing runtime field during snapshot creation caused the runtime not to be injected during cloning.

  • Fixed an issue where sandbox-gateway did not support WebSocket.

  • Fixed an issue where the e2b file.watch_dir method was unavailable.

  • Fixed an issue that made browser-use unusable with the new authentication architecture.

  • The new connect interface no longer shortens the timeout of a running sandbox, which aligns its behavior with the official E2B implementation.

• Compatibility notes:

  • OpenKruise Agents version v0.2.0.

  • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

v0.5.0

April 2, 2026

• Features:

  • Introduced sandbox-gateway.

  • Supports listing and deleting snapshots (checkpoints).

  • All list interfaces now support pagination using limit and nextToken.

  • Restricted the api-keys series of interfaces to admin access only.

  • sandbox-gateway now supports domain name matching.

  • The add-on can now be configured to use either sandbox-manager (default) or the new sandbox-gateway for traffic forwarding.

  • Supports re-mounting Container Storage Interface (CSI) storage after a sandbox is resumed based on E2B.

• Optimizations:

  • Replaced the previous heartbeat mechanism with memberlist for inter-replica discovery.

  • During a claim, the WaitSandboxReady phase can now fall back to fetching the sandbox object from the API server once to handle scenarios with high informer sync latency.

  • Upgrading the add-on or adjusting its configuration through the component center no longer triggers a rolling restart of all pods.

• Compatibility notes:

  • OpenKruise Agents version v0.2.0.

  • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

Version number

Date

Description

Impact

v0.4.3

March 23, 2026

• Features:

  • Supports restoring (cloning) from a checkpoint during creation.

  • Supports creating a checkpoint using the snapshot interface.

  • Supports re-initializing the runtime in scenarios where memory is not preserved.

• Bug fixes:

  • When a sandbox is deleted, the proxies of all replicas are forcibly refreshed to remove the corresponding route entries.

• Compatibility notes:

  • OpenKruise Agents version v0.1.0.

  • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

v0.4.2

March 13, 2026

• Features:

  • Supports mounting File Storage NAS volumes.

• Compatibility notes:

  • OpenKruise Agents version v0.1.0.

  • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

v0.4.1

March 12, 2026

• Features:

  • The create-on-no-stock feature is now enabled by default. If no instances are available in the SandboxSet warm pool, a new instance is automatically created. You can disable this feature by setting e2b.agents.kruise.io/create-on-no-stock = "false".

  • Added a new extended protocol, e2b.agents.kruise.io/never-timeout. If set to "true", the sandbox never expires and its timeout cannot be modified by any setting.

• Performance optimizations:

  • Optimized the time complexity relative to concurrency from O(n) to O(1), which significantly improves claim performance.

  • Added new Prometheus metrics.

  • Changed the DNS Policy to Default to resolve network access issues in very large clusters.

• Compatibility notes:

  • OpenKruise Agents version v0.1.0.

  • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

v0.4.0

March 2, 2026

• Features:

  • [Breaking Change] Removed the e2b.agents.kruise.io/should-init-envd annotation from SandboxSet. Envd is now initialized automatically by default. For custom images that do not require envd initialization, you must explicitly skip the initialization process using the skip-init-runtime parameter.

  • Added the following E2B extended protocols:

    • e2b.agents.kruise.io/create-on-no-stock: Creates a new sandbox instance immediately if no instances are available in the warm pool, instead of waiting for the warm pool to be replenished. Default value: false.

    • e2b.agents.kruise.io/wait-ready-timeout-seconds: Specifies the time to wait for a sandbox to become ready. Default value: 30 seconds.

    • e2b.agents.kruise.io/skip-init-runtime: Skips runtime (envd) initialization. Default value: false.

    • e2b.agents.kruise.io/reserve-failed-sandbox: Preserves a failed sandbox instance after a claim for debugging. Default value: false.

    • e2b.agents.kruise.io/claim-timeout-seconds: Specifies the maximum retry time for a backend sandbox claim operation. Default value: one minute.

  • SandboxSets with the same name across multiple namespaces can now serve as a single template.

• Bug fixes and optimizations:

  • [Breaking Change] The sandbox-manager add-on indexes only allocated sandboxes with the label agents.kruise.io/sandbox-claimed=true. For existing allocated sandboxes that do not have this label, calls to the CRUD or pause/resume APIs return a 404 error.

  • The server-side sandbox claim retry now stops correctly after the client disconnects.

  • Significantly improved the efficiency and correctness of Kubernetes event processing and indexing.

  • Added fallback scheduled garbage collection (GC) logic for the route table to prevent memory leaks caused by lost sandbox Delete events.

• Compatibility notes:

  • OpenKruise Agents community version v0.1.0.

  • E2B SDK versions 2.7.0 to 2.24.0.

This version contains breaking changes. Read the changes carefully before upgrading.

Version number

Date

Description

Impact

v0.3.1

January 20, 2026

• Features:

  • Supports dynamic Persistent Volume (PV) mounting.

• Compatibility notes:

  • Community OpenKruise Agents version v0.1.0.

  • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

v0.3.0

January 13, 2026

• Features:

  • Supports E2B SDK version 2.8.1. This adds the connect interface, supports the auto_pause mode for the client's beta_create method, and aligns the timeout calculation with E2B.

  • Adds extended features to the create interface. You can now trigger in-place update of images and dynamic CSI mounts when creating a sandbox.

  • Optimizes delivery in high concurrency scenarios. This significantly reduces invalid API server requests, supports queues for large numbers of requests, and improves the delivery success rate.

  • Adds strong consistency state synchronization between replicas after hibernation and wake-up operations.

  • Supports custom E2B protocols. This removes the dependency on wildcard domain name resolution and wildcard certificates.

  • Removes gateway authentication. The authentication logic is moved to the runtime.

• Compatibility notes:

  • Community OpenKruise Agents version v0.1.0.

  • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

Version number

Date

Description

Impact

v0.2.0

December 16, 2025

• Features and optimizations:

  • Rewrote the cache indexing logic to significantly improve performance.

  • Refactored the sandbox create, read, update, and delete (CRUD) logic based on the new cache. This greatly reduces optimistic locking conflicts and improves interface response speed.

  • Added compatibility for several E2B interfaces and parameters.

  • Added expectation-based dirty data filtering for cache entries. This reduces abnormal retries caused by delayed informer updates and is highly effective in high concurrency scenarios.

  • Added support for cross-namespace sandboxes. This lets you manage sandbox resources across the entire cluster.

  • Added support for customizing the maximum value of the E2B timeout parameter. This applies to interfaces such as create, timeout, and connect.

• Compatibility notes:

  • Community OpenKruise Agents version v0.1.0.

  • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

v0.1.0

December 4, 2025

• Features:

  • Added an API server for sandbox management that is compatible with the E2B protocol.

  • Added an agent sandbox proxy.

• Compatibility notes:

  • Community OpenKruise Agents version v0.1.0.

  • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.