Issue Triage Gate

Workflow runs for Issue Triage Gate

• bug(kubernetes): sandbox provisioning times out — boundary cannot attach to supervisor (control connect rejected after admission + policy enrichment)

  completed successfully:
  Issue Triage Gate#1660:Issue#5098openedbypflummni
  Nov 1, 20269s
  More actions for workflow run 1660

• bug(docker): containerized gateways reuse helper container names openshell-supervisor-extract-1-<seq>, so concurrent starts on one engine can collide

  completed successfully:
  Issue Triage Gate#1659:Issue#5094openedbycv
  Oct 31, 20267s
  More actions for workflow run 1659

• bug(network): transparent TCP opens to IPv4-mapped destinations are denied even when policy allows the IPv4 endpoint

  completed successfully:
  Issue Triage Gate#1658:Issue#5093openedbyewhauser
  Oct 31, 20268s
  More actions for workflow run 1658

• Not able to get it to work on Rootless Docker

  completed successfully:
  Issue Triage Gate#1657:Issue#5091openedbybringyourowndeveloper
  Oct 31, 20267s
  More actions for workflow run 1657

• config preflight exits 0 on allow_unauthenticated_users = true

  completed successfully:
  Issue Triage Gate#1656:Issue#5090openedbyh0mele55
  Oct 31, 202610s
  More actions for workflow run 1656

• feat(supervisor): stream HTTP session hook uploads on the plain-HTTP forward proxy

  completed successfully:
  Issue Triage Gate#1655:Issue#5086openedbypimlock
  Oct 30, 20269s
  More actions for workflow run 1655

• feat(observability): verify OTLP collectors with a configured CA and client certificate

  completed successfully:
  Issue Triage Gate#1654:Issue#5080openedbykrishicks
  Oct 30, 20268s
  More actions for workflow run 1654

• chore(helm): evaluate application-listener Gateway API configuration

  completed successfully:
  Issue Triage Gate#1653:Issue#5075openedbyTaylorMutch
  Oct 30, 202610s
  More actions for workflow run 1653

• bug(vm): the default sandbox identity ignores the image's sandbox account, so every first boot runs chown -R on /sandbox (about 25-30 s)

  completed successfully:
  Issue Triage Gate#1652:Issue#5073openedbyvineethsai7
  Oct 30, 20268m 12s
  More actions for workflow run 1652

• feat(observability): accept OTLP/gRPC from agents at the trace relay

  completed successfully:
  Issue Triage Gate#1651:Issue#5069openedbykrishicks
  Oct 30, 202634s
  More actions for workflow run 1651

• feat(observability): support OTLP/HTTP and collector headers for relayed agent traces

  completed successfully:
  Issue Triage Gate#1650:Issue#5067openedbykrishicks
  Oct 30, 20268s
  More actions for workflow run 1650

• feat(cli): fixed callback port for browser login inside containers

  completed successfully:
  Issue Triage Gate#1649:Issue#5066openedbyjhjaggars
  Oct 30, 202610s
  More actions for workflow run 1649

• bug(e2e): OpenShift wrapper rejects valid certificate-less TLS connections

  completed successfully:
  Issue Triage Gate#1648:Issue#5064openedbyeviehoward
  Oct 30, 202610s
  More actions for workflow run 1648

• feat(k8s): Kubernetes OpenShellSandbox API backed by the gateway

  completed successfully:
  Issue Triage Gate#1647:Issue#5062openedbyJimBugwadia
  Oct 30, 202610s
  More actions for workflow run 1647

• bug(mxc): sandbox CA bundle holds only the sandbox CA, so tls: skip endpoints fail certificate verification

  completed successfully:
  Issue Triage Gate#1646:Issue#5060openedbyjquesnelle
  Oct 30, 20267s
  More actions for workflow run 1646

• bug(mxc): host supervisors of all MXC sandboxes share one proxy CA directory, \etc\openshell-tls

  completed successfully:
  Issue Triage Gate#1645:Issue#5058openedbyjquesnelle
  Oct 30, 202610s
  More actions for workflow run 1645

• bug(mxc): proxy refuses some connections from an allowed program with "No Windows process owns proxy connection"

  completed successfully:
  Issue Triage Gate#1644:Issue#5056openedbyjquesnelle
  Oct 30, 20268s
  More actions for workflow run 1644

• Uploads with Expect: 100-continue stall on inspected endpoints until the client stops waiting for the 100

  completed successfully:
  Issue Triage Gate#1643:Issue#5053openedbyristo-liftoff
  Oct 30, 20268s
  More actions for workflow run 1643

• feat: keep shared-pool sandbox sessions on their supervisor's gateway

  completed successfully:
  Issue Triage Gate#1642:Issue#5051openedbyFrostGod
  Oct 29, 20267s
  More actions for workflow run 1642

• feat(kubernetes): support private PVC subpaths for non-root workloads

  completed successfully:
  Issue Triage Gate#1641:Issue#5047openedbysallyom
  Oct 29, 202610s
  More actions for workflow run 1641

• Gateway's interceptor credential expires after a forward clock jump or suspend; interceptor-bound RPCs fail closed until the next refresh

  completed successfully:
  Issue Triage Gate#1640:Issue#5044openedbythenashef
  Oct 29, 20261m 55s
  More actions for workflow run 1640

• Sandbox stays admission-REJECTED after its middleware registration is restored; Stop/Start then leaves it undeletable

  completed successfully:
  Issue Triage Gate#1639:Issue#5043openedbythenashef
  Oct 29, 20261m 52s
  More actions for workflow run 1639

• ExecSandbox processes keep running after execution_timeout and after the client disconnects

  completed successfully:
  Issue Triage Gate#1638:Issue#5042openedbythenashef
  Oct 29, 20261m 13s
  More actions for workflow run 1638

• UpdateConfig that adds filesystem paths on a live sandbox is reported LOADED but is not enforced

  completed successfully:
  Issue Triage Gate#1637:Issue#5041openedbythenashef
  Oct 29, 202638s
  More actions for workflow run 1637

• feat(python): include type signatures for generated gRPC calls

  completed successfully:
  Issue Triage Gate#1636:Issue#5039openedbymaxdubrinsky
  Oct 29, 202630s
  More actions for workflow run 1636