Issues

• [CI/CD]: Execute periodic qualification across K8s minor version skew

  agent-substrate/substrate#3373 · Filter by author MushuEE opened on Oct 28, 2026

• [bug-bash] hack/ate-dev-env.sh.example pins CLUSTER_VERSION=1.36.3-gke.1767000, which GKE no longer offers

  area/dev-infra
  agent-substrate/substrate#3371 · Filter by author HavenXia opened on Oct 28, 2026
  

• [Bug]: atecontroller's worker syncer stalls ~13 min after an ate-api-server replica's node is lost (no gRPC keepalive, no per-RPC deadline)

  area/api-machineryarea/reliabilitykind/bug
  agent-substrate/substrate#3352 · Filter by author annapendleton opened on Oct 27, 2026
  1

  

• [Bug]: After an unclean node reboot, atelet's caches serve zero-length entries and every restore on the node fails

  area/nodearea/reliabilityarea/storagekind/bug
  agent-substrate/substrate#3351 · Filter by author annapendleton opened on Oct 27, 2026
  3

• SuspendActor returns Internal while a node's atelet pod is being replaced

  area/api-machineryarea/networkarea/nodearea/upgrade
  agent-substrate/substrate#3350 · Filter by author HavenXia opened on Oct 27, 2026 · v1.0.x
  1

  

• ABA Problem Across Different Policies in Agent Substrate

  area/identityarea/networkbug-bash
  agent-substrate/substrate#3347 · Filter by author SHRUTI6991 opened on Oct 27, 2026 · M3
  2

  

• UpdateTag accepts tags that are being deleted

  area/api-machineryarea/storagebug-bashkind/bug
  Bug

  agent-substrate/substrate#3333 · Filter by author juli4n opened on Oct 27, 2026
  1

  

• [bug-bash] router: a resume that outlasts the parking budget fails gRPC requests with an empty Unavailable

  area/networkkind/bug
  agent-substrate/substrate#3331 · Filter by author Jefftree opened on Oct 27, 2026
  

• [bug-bash] ateworker-gvisor: large Go builds in actors segfault on hosts at the default vm.max_map_count, with no warning

  area/gvisorarea/nodekind/bug
  agent-substrate/substrate#3330 · Filter by author Jefftree opened on Oct 27, 2026

• Hero Demo Refresh - New Demo Video Needed

  area/demoskind/docs
  agent-substrate/substrate#3327 · Filter by author brandonroyal opened on Oct 27, 2026

• [Bug]: ate-api-server rejects every token when the cluster's service account issuer is not kubernetes.default.svc

  area/api-machineryarea/dev-infraarea/identitykind/bug
  agent-substrate/substrate#3326 · Filter by author javajon opened on Oct 27, 2026

• MicroVM suspends wait on actor cleanup that could run in the background

  area/microVMkind/feature
  agent-substrate/substrate#3316 · Filter by author Nishanth29 opened on Oct 27, 2026
  3

• [Security]: podidentity signer should check the pod/SA/node in a PodCertificateRequest before signing

  area/securitykind/bug
  agent-substrate/substrate#3314 · Filter by author LiorLieberman opened on Oct 27, 2026

• Stale worker claim blocks actor resume after increasing template resources

  area/api-machineryarea/schedulingbug-bashkind/bug
  Bug

  agent-substrate/substrate#3311 · Filter by author juli4n opened on Oct 27, 2026

• [bug-bash] atenet-egress exports traces and metrics as service.name=atenet-router

  area/networkarea/observabilitybug-bashkind/bug
  agent-substrate/substrate#3308 · Filter by author JeffLuoo opened on Oct 27, 2026
  

• [bug-bash] Actor stdout and stderr are merged with no stream or severity, so plain-text errors are logged as INFO

  area/observabilitybug-bashkind/bugprio/P2
  agent-substrate/substrate#3307 · Filter by author baizhenyu opened on Oct 27, 2026

• [bug-bash] Cloud Logging: filtering on ate.actor.uid misses ateapi lifecycle and crash records (labels vs jsonPayload)

  area/observabilitybug-bashkind/bugprio/P2
  agent-substrate/substrate#3306 · Filter by author baizhenyu opened on Oct 27, 2026

• [Feature]: A checkpoint that stores an actor without suspending it

  area/apiarea/api-machineryarea/nodearea/storagekind/feature
  agent-substrate/substrate#3299 · Filter by author whysosuresh opened on Oct 27, 2026

• Benchmark Success Gating

  area/benchmarkingkind/feature
  agent-substrate/substrate#3298 · Filter by author maxsmythe opened on Oct 27, 2026
  1

  

• Workload Installation Solution for Benchmarking

  area/benchmarkingkind/feature
  agent-substrate/substrate#3297 · Filter by author maxsmythe opened on Oct 27, 2026
  

• Unseeded singleton global AccessPolicy causes "kubectl ate get/update access-policy --global" to fail or print plain text on fresh clusters

  area/api-machineryarea/cliarea/securitykind/cleanup
  agent-substrate/substrate#3294 · Filter by author moficodes opened on Oct 27, 2026
  1

• Cross-atespace TAG_SCOPE_PUBLISHED tags cannot be used by viewers of the publishing atespace because can_use_tag requires editor on parent_atespace

  area/api-machineryarea/securitykind/bug
  agent-substrate/substrate#3293 · Filter by author moficodes opened on Oct 27, 2026

• kubectl ate get workers -a <atespace> and top worker -a <atespace> call global ListWorkers first, failing with PermissionDenied for atespace owners/editors/viewers

  area/api-machineryarea/cliarea/securitykind/bug
  agent-substrate/substrate#3292 · Filter by author moficodes opened on Oct 27, 2026

• AccessPolicy validation checks maxLength=512 before percent-encoding, causing 500 Internal when OpenFGA TupleKey.User exceeds 512 bytes

  area/apiarea/api-machineryarea/securitykind/bug
  agent-substrate/substrate#3291 · Filter by author moficodes opened on Oct 27, 2026
  

• CreateActorTemplate accepts 1 KiB memoryBytes (OOM-killing shared worker pod on wake), get resources -a <missing-atespace> exits 0, and CreateActor/DeleteAtespace hide missing resource details

  area/apiarea/api-machineryarea/cliarea/nodekind/bug
  agent-substrate/substrate#3290 · Filter by author moficodes opened on Oct 27, 2026