DocsICP FilingConsole
Documentation
Home Page Container Compute Service User Guide Components Release notes for components ack-sandbox-manager

ack-sandbox-manager

Updated at:
Copy as MD
Product
My Favorites

ack-sandbox-manager is a sandbox management API server and agent sandbox proxy add-on that is compatible with the E2B protocol. Use the port matrix to plan network rules, the usage topics to run sandboxes, and the change history to assess the impact of each version before you upgrade.

Overview

ack-sandbox-manager is a sandbox management API server and agent sandbox proxy add-on that is compatible with the E2B protocol. It provides full lifecycle management for sandboxes, including creation, management, pause, and resume.

Port matrix

The add-on creates different workloads based on the enabled features. If you have enabled NetworkPolicy or security groups, allow the corresponding traffic based on the following port matrix.

Inbound ports

  • The sandbox-manager workload (namespace: sandbox-system) contains the following containers and ports:

    Container

    Purpose

    Listening address

    Default port

    Protocol

    Configurable

    Description

    controller

    E2B HTTP API (including /health and /metrics)

    0.0.0.0

    8080

    HTTP

    --port

    Used for the liveness probe. The Service does not directly expose this port.

    controller

    Envoy ext-proc and gRPC health check

    0.0.0.0

    9002

    gRPC

    No (constant)

    Called by the local Envoy.

    controller

    Peer route synchronization /refresh

    0.0.0.0

    7789

    HTTP

    No (constant)

    Used for the readiness probe and startup probe.

    controller

    Memberlist Gossip

    POD_IP

    7946

    TCP and UDP

    --memberlist-bind-port

    Used for Gateway and Manager replica discovery and gossip communication.

    controller

    pprof profiling

    Default: :6060

    6060

    HTTP

    --enable-pprof and --pprof-addr

    Disabled by default.

    envoy

    External data plane and API entry point

    0.0.0.0

    7788

    HTTP and WebSocket

    Envoy ConfigMap

    The only externally exposed port for the Service or Ingress.

    envoy

    Envoy Admin

    127.0.0.1

    9901

    HTTP

    Envoy ConfigMap

    Local access only.
    Kubernetes exposure: The Service or Ingress forwards only port 7788. The containerPort values declared by the Deployment include 8080, 9002, and 7788, but do not declare 7789 and 7946.

  • The sandbox-gateway workload (namespace: sandbox-system) contains the following containers and ports:

    Container

    Purpose

    Listening address

    Default port

    Protocol

    Configurable

    Description

    gateway

    External data plane and API entry point

    0.0.0.0

    7788

    HTTP and WebSocket

    No

    The only externally exposed port for the Service or Ingress.

    gateway

    Prometheus endpoint; scrape path /metrics.

    0.0.0.0

    9902

    HTTP

    No

    Monitoring metrics collection.

    gateway

    Envoy Admin

    127.0.0.1

    9901

    HTTP

    No

    Envoy Admin interface. Allows local access within the Pod only.

    gateway

    • Peer route synchronization (POST /refresh), used by the internal sandbox-manager to synchronize routes.

    • /readyz is used for the readiness probe.

    0.0.0.0

    7789

    HTTP

    No

    Internal port. Not exposed through the Service or Ingress.

    gateway

    Memberlist Gossip

    0.0.0.0

    7946

    TCP + UDP

    No

    Gateway and Manager multi-replica discovery and gossip communication.

  • When you enable enhancedTrafficManagement for the add-on, the egress-gateway, gateway-controller, traffic-proxy, and traffic-extension workloads are created in the sandbox-traffic-system namespace. These workloads contain the following containers and ports:

    Pod / container

    Purpose

    Listening address

    Default port

    Protocol

    Description

    gateway-controller

    Authentication xDS and certificate issuance

    0.0.0.0 / ::

    15012

    TLS gRPC

    Exposed through gateway-controller.sandbox-traffic-system.svc:15012.

    gateway-controller

    Metrics and control plane monitoring interface

    0.0.0.0 / ::

    15014

    HTTP

    Exposed through gateway-controller.sandbox-traffic-system.svc:15014.

    traffic-proxy (ztunnel sidecar, deployed in workload Pods)

    Prometheus metrics

    ztunnel Pod; binding address determined by the ztunnel image

    15020

    HTTP

    No Service exposed.

    traffic-proxy

    /healthz/ready readiness probe

    ztunnel Pod; binding address determined by the ztunnel image

    15021

    HTTP

    Used by kubelet for probing.

    egress-gateway

    Receives workload tunnel traffic

    0.0.0.0 / ::

    15008

    TCP-based HBONE

    Exposed by the Service.

    egress-gateway

    /stats/prometheus merged metrics

    0.0.0.0 / ::

    15020

    HTTP

    The egress gateway Service does not expose this port.

    egress-gateway

    /healthz/ready readiness probe

    0.0.0.0 / ::

    15021

    HTTP

    Exposed by the egress gateway Service.

    egress-gateway

    Envoy Prometheus listening port

    Default: 0.0.0.0 / ::

    15090

    HTTP

    The egress gateway Service does not expose this port.

    traffic-extension

    Envoy external processing and Layer 7 policy enforcement

    Default: 0.0.0.0 / ::

    9002

    gRPC

    Exposed by the Headless Service.

    traffic-extension

    gRPC health check

    Default: 0.0.0.0 / ::

    9003

    gRPC

    Used by liveness and readiness probes.

    traffic-extension

    Prometheus metrics

    Default: 0.0.0.0 / ::

    9090

    HTTP

    Exposed by the Headless Service.

Outbound ports

  • The sandbox-manager workload:

    Source

    Purpose

    Target

    Default port

    Protocol

    Condition

    controller

    Kubernetes API

    kubernetes.default.svc or kubeconfig

    443

    HTTPS

    Always enabled. Used for custom resource definitions (CRDs), watch mechanisms, and Lease resources.

    controller

    Peer route synchronization

    <Peer PodIP>

    7789

    HTTP

    Multi-replica deployment.

    controller

    Memberlist join and gossip

    <Peer PodIP>

    7946

    TCP and UDP

    Always enabled.

    controller

    agent-runtime Sidecar

    <Sandbox PodIP>

    49983

    HTTP

    Operations such as claim, clone, and resume. Can be overridden by using annotations.

    controller

    Sandbox application port (direct connection)

    <Sandbox PodIP>

    Application port, such as Chrome DevTools Protocol (CDP) port 9222

    HTTP

    API called on demand (such as BrowserUse).

    controller

    Quota Redis

    --quota-redis-addr

    Typically 6379

    Redis or TCP

    Optional. If not configured, fail-open is used by default.

    controller

    MySQL API key storage

    E2B_KEY_STORAGE_DSN

    Typically 3306

    MySQL or TCP

    Enabled only when --e2b-key-storage=mysql.

    envoy

    ext-proc

    127.0.0.1

    9002

    gRPC

    Always enabled.

    envoy

    Local E2B API

    127.0.0.1

    8080

    HTTP

    Non-sandbox requests.

    envoy

    Sandbox user traffic

    <Sandbox PodIP>

    Mapped port

    HTTP or WebSocket (ORIGINAL_DST)

    Sandbox requests.

  • The sandbox-gateway workload:

    Source

    Purpose

    Target

    Default port

    Protocol

    Condition

    gateway

    Kubernetes API

    kubernetes.default.svc or kubeconfig

    443

    HTTPS

    Always enabled. Used for custom resource definitions (CRDs), watch mechanisms, and Lease resources.

    gateway

    Peer route synchronization

    <Peer PodIP>

    7789

    HTTP

    Always enabled.

    gateway

    Memberlist join and gossip

    <Peer PodIP>

    7946

    TCP and UDP

    Always enabled.

    gateway

    agent-runtime Sidecar

    <Sandbox PodIP>

    49983

    HTTP

    The client needs to access the sandbox agent-runtime.

    gateway

    Sandbox user traffic

    <Sandbox PodIP>

    Mapped port

    HTTP or WebSocket

    Sandbox requests.

  • When you enable the enhancedTrafficManagement feature for the add-on:

    Source

    Purpose

    Target

    Default address

    Port

    Protocol

    Condition

    gateway-controller

    Watches workload and configuration resources, and reads and writes enabled certificate data

    Kubernetes API Server

    In-cluster API endpoint, typically kubernetes.default.svc

    443

    HTTPS

    Always required

    gateway-controller

    Resolves the hostnames used by egress policies

    DNS resolver

    EXTERNAL_NAMES_CONTROLLER_DNS_SERVER, or the nameserver in /etc/resolv.conf

    53

    UDP/TCP-based DNS

    Always required

    traffic-proxy

    Receives xDS configuration and requests workload certificates

    gateway-controller

    gateway-controller.sandbox-traffic-system.svc.<cluster-domain>

    15012

    TLS gRPC

    Always required

    traffic-proxy

    Sends selected client traffic to the designated egress gateway

    egress gateway

    egress-gateway.sandbox-traffic-system.svc

    15008

    TCP-based HBONE

    Always required

    egress-gateway

    Receives xDS configuration and requests workload certificates

    gateway-controller

    gateway-controller.sandbox-traffic-system.svc

    15012

    TLS gRPC

    Always required

    egress-gateway

    Sends request attributes to the extension for Layer 7 policy enforcement

    traffic-extension

    Default: traffic-extension.sandbox-traffic-system.svc.<cluster-domain>

    9002

    gRPC

    Always required

    egress-gateway

    Connects policy-allowed traffic to the original external target

    upstream target

    Target address and request port

    TCP, TLS, HTTP, or HTTPS

    When traffic is allowed by the policy

    traffic-extension

    Watches SecurityProfile resources

    Kubernetes API Server

    In-cluster API endpoint, typically kubernetes.default.svc

    443

    HTTPS

    When traffic-extension is enabled

    traffic-extension

    Retrieves sandbox identity tokens

    Identity provider

    trafficExtension.identityProviderUrl

    HTTP or HTTPS

    When the identity provider URL is configured

    traffic-extension

    Sends configured audit events

    Audit webhook

    URL rendered from SecurityProfile

    HTTP or HTTPS

    When the profile configures an audit webhook

Usage

For information about how to use ACS Agent Sandbox, see Create an Agent Sandbox.

Changelog

September 2026

Version number

Date

Description

Impact

v0.6.13-release.1

September 15, 2026

  • Optimizations:

    • Added a short sandbox ID orchestration switch: enabled through sandboxManager.controller.enableShortSandboxId (default false) and shortSandboxIdPrefix (default empty). After it is enabled, a short ID that can carry a prefix is generated for each allocated or cloned sandbox.

    • Hardened the securityContext of the Sandbox Gateway container: a read-only root file system, a non-root user, no privilege escalation, and the RuntimeDefault seccompProfile.

  • Image versions:

    • Control plane (sandbox-manager) image: v0.6.12-release.2.

    • Gateway (sandbox-gateway) image: v0.4.0-release.2.

  • Compatibility notes:

    • OpenKruise Agents community version v0.6.0.

    • E2B SDK versions 2.7.0 to 2.50.0.

This upgrade does not affect your services.

v0.6.12

September 7, 2026

  • Features:

    • Supports an optional short sandbox ID that remains unchanged during each delivery, which prevents E2B dynamic domain names from becoming invalid because the ID is too long. Before you enable this feature, upgrade all related add-ons. After you enable it, do not roll back to a version that does not recognize short sandbox IDs.

    • Supports refreshing and automatically rotating sandbox traffic access tokens, and obtaining the token expiration time.

    • Supports controlling outbound access by domain name through E2B create and update requests, and setting or deleting request headers.

    • Supports automatically resuming a paused sandbox when it receives an access request, and restarting the auto-pause timer.

    • Supports in-place memory scale-up for pooled sandboxes at allocation time, and rejects requests that reduce memory or change the original resource guarantee level.

    • Supports mounting AgenticBucket and BucketSpace storage for E2B sandboxes.

  • Bug fixes:

    • Fixed an issue where insufficient E2B resource ownership validation allowed non-owners to access sandboxes or volumes. The existence of resources is now hidden from callers that are not authorized to access them.

    • Fixed an issue where administrator API key changes were not reliably saved and where corrupted key entries blocked other keys from loading. Deployments with E2B authentication enabled must now explicitly configure the administrator key.

    • Fixed an issue where adjusting resources could overwrite resources automatically added by the system, incorrectly modify init containers, or wait repeatedly after a conflict.

    • Fixed an issue where sandbox cleanup did not release quotas and routes when network policy creation failed.

    • Fixed an issue where sandbox query backend exceptions were incorrectly reported as nonexistent resources, causing delete requests to incorrectly return success.

    • Fixed an issue where existing sandboxes that do not use JSON Web Token (JWT) could lose their original access token protection when Traffic JWT authentication is enabled.

  • Optimizations:

    • Optimized the Sandbox Gateway caching mechanism to reduce memory usage.

  • Image versions:

    • Control plane (sandbox-manager) image: v0.6.12-release.2.

    • Gateway (sandbox-gateway) image: v0.4.0-release.2.

  • Compatibility notes:

    • OpenKruise Agents community version v0.6.0.

    • E2B SDK versions 2.7.0 to 2.50.0.

Before you enable short sandbox IDs, upgrade all related add-ons. After you enable them, do not roll back to a version that does not recognize short sandbox IDs. Deployments with E2B authentication enabled must explicitly configure the administrator API key. After the upgrade, existing sandboxes that have Traffic JWT authentication enabled but do not use JWT retain their original access token protection.

August 2026

Version number

Date

Description

Impact

v0.6.11

August 19, 2026

  • Features:

    • Egress traffic management supports using ConfigMaps as the data source for policy matching, which extends the policy parameter capabilities.

    • Supports accessing agent-runtime over mutual TLS (mTLS). After you enable the compatibility switch enableTLS in the add-on deployment configuration, the system issues a server certificate for the created sandbox-agent. The sandbox-manager then uses a client certificate to access agent-runtime over TLS.

    • When you claim a sandbox through SandboxClaim, the labels and annotations that you configured propagate to the Pod that is finally created. Internally reserved annotations are filtered out and are not leaked to the Pod.

    • Supports distributed tracing (OpenTelemetry) across the entire sandbox lifecycle.

    • Added the cluster-level security policy GlobalSecurityProfile.

    • Supports automatic refresh of AgenticFS storage credentials. Long-running sandboxes no longer become unavailable because of expired credentials.

    • Supports E2B network config (allowOut/denyOut).

    • Egress traffic security hardening: Before v0.6.11, when HTTP egress traffic managed by enhancedTrafficManagement was forwarded through the gateway, the gateway connected to the original destination address of the client request. If the request Host is inconsistent with the original destination IP address, a security risk may exist. For example, when a token is injected by using SecurityProfile, if the actually requested IP address and Host are inconsistent, the token may be sent to a target address that does not correspond to the Host. This causes leakage of sensitive information. Starting from v0.6.11, the gateway performs DNS resolution based on the request Host and connects to the resolved address instead of using the original destination address of the client. This security hardening may cause traffic access failures in the following scenarios:

      • A self-managed DNS server is used to resolve internal domain names, but the egress gateway cannot obtain the same DNS resolution results.

      • The request Host is inconsistent with the original destination address of the client.

      • The client obtains the destination address through /etc/hosts, local DNS cache, DNS hijacking, or SDK service discovery.

  • Bug fixes:

    • Fixed an issue where requests to the upstream failed after egress traffic was terminated by TLS.

    • Fixed the idToken propagation logic. After a new token is issued, the old token file is removed so that only one valid token is retained in the sandbox.

    • Fixed an issue where no traffic access token was issued for cloned sandboxes.

    • Fixed an issue where the manager could not start when the TrafficPolicy CRD was not installed in the cluster.

    • Corrected E2B Traffic Policy priorities.

  • Image versions:

    • Control plane (sandbox-manager) image: v0.6.11.

    • Gateway (sandbox-gateway) image: v0.3.0.

  • Compatibility notes:

    • OpenKruise Agents community version v0.3.0.

    • E2B SDK versions 2.7.0 to 2.50.0.

After the upgrade, HTTP egress traffic managed by enhancedTrafficManagement is resolved through DNS based on the request Host. It connects to the resolved address instead of using the original destination address of the client. Traffic access may fail in scenarios such as using self-managed DNS or having a request Host that does not match the original destination address. Read the changes carefully before you upgrade.

v0.6.9

August 13, 2026

  • Features:

    • Supports configuring, querying, and updating outbound network access rules for sandboxes during creation and runtime.

    • Supports server-side encryption of ACK Object Storage Service (OSS) volumes with a customer-managed Key Management Service (KMS) key.

    • Supports sandbox-manager securely accessing TLS-capable agent-runtime over HTTPS or mTLS.

  • Bug fixes:

    • Fixed an issue where querying a running sandbox that was claimed but not yet ready incorrectly returned that the sandbox does not exist.

    • Fixed an issue where concurrent creation or deletion of API keys across multiple replicas could overwrite other keys.

    • Fixed an issue where the default traffic token request header of the gateway was inconsistent with the E2B SDK. Custom clients that send the traffic token in the previous default header must switch to the X-Access-Token header used by the E2B SDK, or explicitly retain the old configuration.

    • Fixed an issue where dynamic storage mount credentials could be leaked through logs.

    • Fixed an issue where a sandbox cloned from a checkpoint could retain the source sandbox token and be identified with the wrong identity (the incorrect token file is removed).

  • Image versions:

    • Control plane (sandbox-manager) image: v0.6.9.

    • Gateway (sandbox-gateway) image: v0.3.0.

  • Compatibility notes:

    • OpenKruise Agents community version v0.6.0.

    • E2B SDK versions 2.7.0 to 2.50.0.

This upgrade does not affect your services.

July 2026

Version number

Date

Description

Impact

v0.6.8

July 29, 2026

  • Features:

    • Supports JWT issuance. When a sandbox is claimed through the E2B protocol, a JWT Traffic Access Token is issued and returned to the client.

    • The gateway supports JWT signature verification based on Traffic Access Tokens.

    • The gateway adds a /readyz interface on port 7789 as an HTTP-based readiness probe, which ensures that the ready status (200 OK) is returned only after the JWT Verifier starts.

    • Claimed sandboxes are labeled with the Owner ID (the ID of the API key).

    • Added the GlobalSecurityProfile resource.

    • SecurityProfile supports configuring priority through the priority field.

  • Bug fixes:

    • Fixed a rare issue where creating or deleting a key could fail when a Secret is used as the API key storage backend.

  • Image versions:

    • Control plane (sandbox-manager) image: v0.6.8.

    • Gateway (sandbox-gateway) image: v0.3.0.

  • Compatibility notes:

    • OpenKruise Agents community version v0.3.0.

    • E2B SDK versions 2.7.0 to 2.50.0.

This upgrade does not affect your services.

v0.6.7

July 22, 2026

  • Features:

    • Supports specifying the reclaim time for hibernated sandboxes through the extended metadata e2b.agents.kruise.io/reserve-paused-sandbox-for during creation, or through the extended header x-e2b-kruise-reserve-paused-sandbox-for during hibernation. The default is 100 years (no deletion). Valid values are positive duration strings, such as 30m, 1h, and 240h.

    • Supports multi-domain access.

    • Supports Security Token Service (STS) temporary token rotation under the E2B protocol to enable on-demand OSS storage mounting.

  • Image versions:

    • Control plane (sandbox-manager) image: v0.6.7.

    • Gateway (sandbox-gateway) image: v0.2.5.

  • Compatibility notes:

    • OpenKruise Agents community version v0.3.0.

    • E2B SDK versions 2.7.0 to 2.50.0.

This upgrade does not affect your services.

v0.6.6

July 7, 2026

  • Features:

    • During cloning, supports specifying the full name and the fixed prefix of the cloned sandbox through the extended metadata e2b.agents.kruise.io/sandbox-name and e2b.agents.kruise.io/sandbox-generate-name, respectively.

    • Supports setting quotas for API keys, including the number of sandboxes, total CPUs, and total memory.

    • Supports using sandbox-gateway for inbound traffic authentication of sandboxes.

    • The default data plane service for new clusters has been switched to sandbox-gateway.

  • Optimizations:

    • Reduced log volume by approximately 70%.

    • Sandboxes that fail to be created are not retained during retries by default.

    • Added a label (agents.kruise.io/reserved-failed-sandbox) for filtering sandboxes that fail to be created. These sandboxes are no longer returned by query interfaces such as list and info.

  • Bug fixes:

    • Fixed an issue where the list interface could not list all sandboxes in large-scale clusters.

  • Image versions:

    • Control plane (sandbox-manager) image: v0.6.6.

    • Gateway (sandbox-gateway) image: v0.2.5.

  • Compatibility notes:

    • OpenKruise Agents community version v0.3.0.

    • E2B SDK versions 2.7.0 to 2.50.0.

This upgrade does not affect your services.

June 2026

Version number

Date

Description

Impact

v0.6.5

June 17, 2026

  • Features:

    • Updated the Envoy log format for sandbox-manager and sandbox-gateway to provide more detailed connection information.

    • sandbox-gateway supports matching the downstream HTTP protocol when selecting the upstream HTTP protocol.

  • Bug fixes:

    • Fixed a rare issue where the snapshot interface could incorrectly report an error when creating a checkpoint, which caused the interface call to fail and checkpoints to leak.

    • When you use a secret as the API key storage backend, newly created keys now take effect across all replicas promptly, with a possible millisecond-level delay.

    • When the create interface creates a sandbox directly, it no longer retries on certain non-retriable errors, such as quota limits, and returns the error immediately.

    • Added exponential backoff to the retry process of the create interface, which significantly reduces the number of retries for a single request.

    • Sandboxes with a Ready status of False can now be deleted.

    • Updated the Envoy base image version for sandbox-gateway to v1.37.3 to fix CVE-2026-27135 and CVE-2026-47774.

  • Image versions:

    • Control plane (sandbox-manager) image: v0.6.5.

    • Gateway (sandbox-gateway) image: v0.2.3.

  • Compatibility notes:

    • OpenKruise Agents community version v0.3.0.

    • E2B SDK versions 2.7.0 to 2.50.0.

This upgrade does not affect your services.

v0.6.4

June 11, 2026

  • Features:

    • Advanced traffic management:

      • Supports man-in-the-middle (MITM) interception of HTTPS requests in conjunction with ack-agent-identity

      • SecurityProfile supports matching request schemes

      • SecurityProfile supports audit webhooks

      • SecurityProfile supports API key credential injection

      • SecurityProfile supports Alibaba Cloud STS token injection

  • Image versions:

    • Control plane (sandbox-manager) image: v0.6.3-release.1.

    • Gateway (sandbox-gateway) image: v0.2.2.

  • Compatibility notes:

    • OpenKruise Agents community version v0.3.0.

    • E2B SDK versions 2.7.0 to 2.50.0.

This upgrade does not affect your services.

v0.6.3

June 9, 2026

  • Bug fixes:

    • Removed the createPodInsteadOfSandbox feature.

  • Features:

    • Removed the default server-side timeouts for sandbox creation, including Claim Timeout and Wait Ready Timeout. These timeouts can still be configured through the corresponding metadata.

  • Image versions:

    • Control plane (sandbox-manager) image: v0.6.3-release.1.

    • Gateway (sandbox-gateway) image: v0.2.2.

  • Compatibility notes:

    • OpenKruise Agents community version v0.3.0.

    • E2B SDK versions 2.7.0 to 2.50.0.

This upgrade does not affect your services.

v0.6.2

June 5, 2026

  • Features:

    • Added support for E2B SDK versions 2.25.0 and later.

      • The create sandbox interface now enforces secure mode (accessToken authentication).

      • Added an e2b key compatibility layer. New keys are returned directly in a format that meets the strict validation of the e2b client. Existing keys and custom admin keys can also be losslessly converted into the compatible format.

    • The data plane now supports long-lived connections, and the idle timeout is configurable.

    • Added a delayed exit feature to the sandbox-manager control plane. During a rolling upgrade of the add-on, old Pods can optionally exit after a delay to make traffic switching smoother.

  • Optimizations:

    • Extended the server-side resume timeout to handle large-scale resume scenarios under extreme pressure.

  • Image versions:

    • Control plane (sandbox-manager) image: v0.6.2-release.1.

    • Gateway (sandbox-gateway) image: v0.2.2.

  • Compatibility notes:

    • OpenKruise Agents community version v0.3.0.

    • E2B SDK versions 2.7.0 to 2.50.0.

This upgrade does not affect your services.

v0.6.1

June 1, 2026

  • Bug fixes:

    • Fixed a very low-probability issue where the process panicked when a user called the create interface and disconnected extremely quickly.

    • Fixed an issue where an auto-pause sandbox could not be resumed through connect.

  • Features:

    • Supports Layer 7 egress traffic control. Added the SecurityProfile API, which intercepts requests to the egress gateway through the egress-control runtime and supports intercepting requests based on HTTP request attributes (such as path and method).

    • The create interface supports enabling the sandbox IP retrieval capability through the metadata e2b.agents.kruise.io/return-sandbox-ip: "true". For a sandbox created with this metadata, the sandbox information returned by query interfaces such as create, list, and get_info includes an additional metadata entry e2b.agents.kruise.io/sandbox-ip, whose value is the IP address of the sandbox.

    • Supports HTTP access (HTTPS is not enforced).

    • The create interface supports configuring resource limits for a sandbox at creation time by using the e2b.agents.kruise.io/cpu-request and e2b.agents.kruise.io/cpu-limit metadata.

  • Image versions:

    • Control plane (sandbox-manager) image: v0.6.1-release.1.

    • Gateway (sandbox-gateway) image: v0.2.2.

  • Compatibility notes:

    • OpenKruise Agents community version v0.3.0.

    • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

May 2026

Version number

Date

Description

Impact

v0.6.0

May 15, 2026

  • Architecture refactoring:

    • Architecture upgrade: sandbox-manager is completely refactored based on controller-runtime.

    • A large number of original implementations are optimized and incomplete tests are improved to increase correctness.

    • Fixed a large number of non-critical issues that were invisible to users.

    • Removed unnecessary internal Template Cache and SandboxSet Reconcile to improve claim performance and reduce memory consumption.

    • Rewrote the underlying wait mechanism to support concurrent monitoring of Kubernetes resource states in complex scenarios.

  • Features:

    • Enhanced multi-tenancy: Added the Teams API, which supports setting a team for an API key and isolating resources for different users (keys) by namespace through teams. Compatibility with original keys (cluster scope permissions) is retained.

    • Pause and resume optimizations: Supports calls to the pause and connect interfaces at high concurrency. Multiple non-conflicting requests can merge their workflow state checks and return at the same time without errors, while conflicting concurrent requests still return errors. The resume operation (connect) always sets the timeout correctly, even if the resume fails.

    • Error message optimizations: When the Create method fails, detailed information is returned for troubleshooting. The issue can usually be identified without checking logs.

  • Image versions:

    • Control plane (sandbox-manager) image: v0.6.0.

    • Gateway (sandbox-gateway) image: v0.2.2.

  • Compatibility notes:

    • OpenKruise Agents community version v0.3.0.

    • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

April 2026

Version number

Date

Description

Impact

v0.5.2

April 29, 2026

  • Features:

    • Supports using MySQL as the backend storage for API keys.

    • Supports custom CDP ports when you use the BrowserUse API.

    • Supports the List and Get interfaces for templates.

    • sandbox-gateway supports graceful shutdown (OpenKruise custom API).

    • Supports restoring dynamic storage mounts in checkpoint clone and resume scenarios.

    • sandbox-manager adds a large number of Prometheus metrics (supports the sandbox dashboard).

    • sandbox-manager supports updating Pod labels when a sandbox is claimed.

  • Performance optimizations:

    • Optimized dynamic storage mount performance and supports parallel mounting.

  • Bug fixes:

    • Fixed an issue where the runtime field was missing when a snapshot was created, which caused the runtime not to be injected during cloning.

    • Fixed an issue where sandbox-gateway did not support WebSocket.

    • Fixed an issue where the e2b file.watch_dir method was unavailable.

    • Fixed an issue where browser-use was unavailable under the new authentication architecture.

    • The new connect interface no longer shortens the timeout of a running sandbox, which is consistent with the official E2B behavior.

  • Compatibility notes:

    • OpenKruise Agents community version v0.2.0.

    • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

v0.5.0

April 2, 2026

  • Features:

    • Added sandbox-gateway.

    • Supports List and Delete for snapshots (checkpoints).

    • All list interfaces support limit + nextToken pagination.

    • The api-keys interfaces are restricted to admin access.

    • sandbox-gateway supports domain name matching.

    • In the add-on configuration, select sandbox-manager (default) or the new sandbox-gateway for traffic forwarding.

    • Added Container Storage Interface (CSI) storage remounting after an E2B sandbox is paused and resumed.

  • Performance optimizations:

    • Uses memberlist instead of the original heartbeat mechanism for replica discovery.

  • Bug fixes:

    • During a claim, the WaitSandboxReady phase can fall back at most once to fetching the sandbox object from the API Server to handle scenarios with extremely high informer synchronization latency.

    • Upgrading or adjusting the configuration on the Add-ons page no longer causes a rolling restart of all Pods.

  • Image versions:

    • Control plane (sandbox-manager) image: v0.5.0.1.

    • Gateway (sandbox-gateway) image: v0.2.0.

  • Compatibility notes:

    • OpenKruise Agents community version v0.2.0.

    • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

March 2026

Version number

Date

Description

Impact

v0.4.3

March 23, 2026

  • Features:

    • Supports restoring from a checkpoint at creation time through the restore and clone operations.

    • Supports creating a checkpoint through the snapshot interface.

    • Supports re-initializing the runtime in scenarios where memory is not retained.

  • Bug fixes:

    • When a sandbox is deleted, the proxies of all replicas are forcibly refreshed to remove the corresponding route entries.

  • Compatibility notes:

    • OpenKruise Agents community version v0.1.0.

    • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

v0.4.2

March 13, 2026

  • Features:

    • Supports File Storage NAS (NAS) mounting.

  • Compatibility notes:

    • OpenKruise Agents community version v0.1.0.

    • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

v0.4.1

March 12, 2026

  • Features:

    • create-on-no-stock is now enabled by default. When no instances are available in the SandboxSet warm-up pool, the creation process starts automatically. To disable this feature explicitly, set e2b.agents.kruise.io/create-on-no-stock = "false".

    • Added the extended protocol e2b.agents.kruise.io/never-timeout: When set to "true", the sandbox never expires and cannot be modified by any means of setting a timeout.

  • Performance optimizations:

    • Optimized the time complexity relative to concurrency from O(n) to O(1), which significantly improves claim performance.

    • Added several Prometheus metrics.

    • Changed the DNS Policy to Default to resolve network access issues in extremely large-scale clusters.

  • Compatibility notes:

    • OpenKruise Agents community version v0.1.0.

    • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

v0.4.0

March 2, 2026

  • Features:

    • [Breaking Change]Removed the e2b.agents.kruise.io/should-init-envd Annotation on SandboxSet. envd is now automatically initialized by default. For custom images that do not require envd initialization, you must manually skip the initialization process by using the skip-init-runtime parameter.

    • Added the following E2B extended protocols:

      • e2b.agents.kruise.io/create-on-no-stock: Creates a new sandbox instance directly without waiting for the warm-up pool to be replenished when no instances are available in the pool. The default value is false.

      • e2b.agents.kruise.io/wait-ready-timeout-seconds: Specifies the time to wait for a sandbox to become ready. The default value is 30 seconds.

      • e2b.agents.kruise.io/skip-init-runtime: Skips runtime (envd) initialization. The default value is false.

      • e2b.agents.kruise.io/reserve-failed-sandbox: Retains the state of sandboxes that fail during a claim. The default value is false, which means the state is not retained.

      • e2b.agents.kruise.io/claim-timeout-seconds: The maximum retry time for backend sandbox claim operations. The default value is one minute.

    • SandboxSets with the same name in multiple namespaces can now be used as the same template.

  • Bug fixes and optimizations:

    • [Breaking Change]sandbox-manager now indexes only claimed sandboxes that have the label agents.kruise.io/sandbox-claimed=true. If an existing claimed sandbox does not have this label, calls to the CRUD interfaces and the pause/resume interfaces return a 404 error.

    • Server-side sandbox claim retries now stop correctly after the client disconnects.

    • Significantly improved the efficiency and correctness of Kubernetes event handling and indexing.

    • Added a fallback scheduled route table garbage collection (GC) logic to prevent memory leaks caused by lost sandbox delete events.

  • Compatibility notes:

    • OpenKruise Agents community version v0.1.0.

    • E2B SDK versions 2.7.0 to 2.24.0.

This version contains breaking changes. Read the changes carefully before upgrading.

January 2026

Version number

Date

Description

Impact

v0.3.1

January 20, 2026

  • Features:

    • Supports dynamic disk mounting through Persistent Volumes (PVs).

  • Compatibility notes:

    • OpenKruise Agents community version v0.1.0.

    • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

v0.3.0

January 13, 2026

  • Features:

    • Supports E2B SDK 2.8.1: Added the connect interface. Supports the auto_pause mode, which corresponds to the beta_create method of the client. Aligned with the E2B timeout calculation behavior.

    • Added extended capabilities to the create interface: supports triggering an in-place update of the image when a sandbox is created, and supports triggering CSI dynamic mounting when a sandbox is created.

    • Optimized ultra-high-concurrency delivery scenarios: significantly reduced the number of invalid API Server requests, and supports queuing a large number of requests to improve the delivery success rate.

    • Added state synchronization with strong consistency between replicas after pause and resume operations.

    • Supports custom E2B protocols without relying on wildcard DNS resolution or wildcard certificates.

    • Removed gateway authentication and moved the authentication logic down to the runtime.

  • Compatibility notes:

    • OpenKruise Agents community version v0.1.0.

    • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

December 2025

Version number

Date

Description

Impact

v0.2.0

December 16, 2025

  • Features and optimizations:

    • Rewrote the cache indexing logic to significantly improve performance.

    • Refactored the sandbox CRUD logic based on the new cache to significantly reduce optimistic lock conflicts and improve interface response speed.

    • Added compatibility with several E2B interfaces and parameters.

    • Added expectation-based cache dirty data filtering to reduce abnormal retries caused by delayed informer updates (significant benefits in high-concurrency scenarios).

    • Supports sandboxes across namespaces, which allows you to manage sandbox resources cluster-wide.

    • Supports customizing the maximum value of the E2B timeout parameter for interfaces such as create, timeout, and connect.

  • Compatibility notes:

    • OpenKruise Agents community version v0.1.0.

    • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.

v0.1.0

December 4, 2025

  • Features:

    • A sandbox management API server that is compatible with the E2B protocol.

    • An agent sandbox proxy.

  • Compatibility notes:

    • OpenKruise Agents community version v0.1.0.

    • E2B SDK versions 2.7.0 to 2.24.0.

This upgrade does not affect your services.
Previous：ack-agent-sandbox-controllerNext：acs-local-passthrough-controller