Container Compute Service:ack-agent-sandbox-controller

Version

Update time

Changes

Impact

v0.5.16-release.2

June 16, 2026

• Bug Fixes:

  • Added an image consistency check for the init container after a sandbox resumes. Runtime initialization and CSI dynamic volume mounting now proceed only after the controller confirms image consistency.

This update has no impact on your services.

v0.5.16-release.1

June 12, 2026

• Features:

  • The Pod template spec now remains unchanged after a sandbox pauses or resumes, preventing unexpected changes to the Pod specification upon resume.

  • A SandboxSet now automatically creates its associated SandboxTemplate, simplifying the configuration process.

  • Optimized claim performance for large-scale SandboxSet scenarios (5,000+ sandboxes). A new in-place counter, CountActiveSandboxes, replaces full-list copying to significantly reduce overhead on the claim hot path.

  • Metrics cleanup during sandbox deletion now runs asynchronously. This moves the operation out of the reconcile hot path, improving deletion throughput.

  • SandboxUpdateOps now supports all sandboxes not controlled by a SandboxSet, covering upgrade scenarios for sandboxes created directly.

• Bug Fixes:

  • Fixed an issue where newly scaled-out sandboxes caused SandboxUpdateOps to remain in the Updating state. The controller now automatically skips sandboxes whose templates already match the target version.

  • Stabilized the init container injection order to ensure a consistent injection order for runtime containers and maintain backward compatibility.

  • Fixed an intermittent failure in the in-place image upgrade for sandboxes. The controller now skips the immutable part validation if the SandboxHashImmutablePart annotation is missing.

This update has no impact on your services.

v0.5.14-release.1

June 1, 2026

• Features:

  • Added support for sandbox traffic management. This feature injects a traffic-proxy runtime and is enabled by adding the network.alibabacloud.com/network-policy-mode=enhanced-traffic-policy annotation to the Pod.

  • Added the sandbox_runtime_container_abnormal metric to monitor abnormal states of sandbox runtime containers.

  • Added support for deploying a TrafficPolicy from the component center to restrict access to port 49983 on envd. This feature is disabled by default.

  • Added tracing support for sandbox creation, deletion, pause, and resume operations. This feature is disabled by default and can be enabled by using the FeatureGate SandboxTraceLog=true.

• Bug Fixes:

  • Making deleteSandboxMetrics an asynchronous call resolves a reconcile blockage issue caused by lock contention on DeletePartialMatch during high-concurrency sandbox deletions.

  • Fixed an issue where the sandbox status was not persisted while in the Pending phase.

This update has no impact on your services.

Version

Update time

Changes

Impact

v0.5.13-release.1

May 21, 2026

• Bug Fixes:

  • Fixed an issue where the message field of the sandbox's status condition did not include the script's stdout or stderr when a SandboxUpdateOps lifecycle script failed, improving troubleshooting efficiency.

  • Added a fallback check for resumedCondition.Status=True during sandbox resume. This resolves an issue where the resume process would stall if the underlying pause operation succeeded but the Pod's Ready condition remained True.

• Features:

  • Added validation for mount configurations in the VolumeClaimTemplates field of a SandboxSet.

  • Added validation for the TTLAfterCompleted and WaitReadyTimeout fields in a SandboxClaim.

  • Introduced a new FeatureGate, SandboxMultiClusterNaming. When enabled, it embeds a cluster ID hash into the sandbox generateName to prevent naming conflicts in multi-cluster environments. This feature is disabled by default and can be enabled in the component center.

  • You can now perform an in-place CPU scale-up for sandboxes from the warm pool when creating them with a SandboxClaim or the E2B SDK.

  • Added Strategic Merge Patch markers to CRD types to improve kubectl apply performance and reduce API server load.

  • Added Prometheus metrics for sandbox pause, resume, and upgrade operations for display on monitoring dashboards.

  • Moved the CSI dynamic volume mounting capability for post-pause and post-resume scenarios to the Sandbox Controller, removing the dependency on Sandbox Manager.

This update has no impact on your services.

v0.5.12-release.3

May 11, 2026

• Bug Fixes:

  • Fixed an issue where dynamic volume mounting was not triggered during a SandboxUpdateOps upgrade for sandboxes created through the E2B workflow.

This update has no impact on your services.

v0.5.12-release.2

May 8, 2026

• Bug Fixes:

  • Fixed an issue where a SandboxClaim with SkipInitRuntime=false would fail if no agent-runtime was configured. It now skips the InitRuntime step and logs an error.

  • Changed the percentage calculation for maxUnavailable in a SandboxSet to round up. This ensures that at least one sandbox can be updated.

This update has no impact on your services.

v0.5.12-release.1

May 6, 2026

• Features:

  • SandboxSet now supports upgrading sandboxes in a warm pool. The updateStrategy supports the maxUnavailable parameter.

  • Sandboxes now support updateStrategy=Recreate and the preUpgrade and postUpgrade lifecycle hooks. CSI dynamic volume mounting now occurs after the upgrade.

  • You can now use a SandboxUpdateOps custom resource (CR) to upgrade allocated sandboxes.

  • In pause and resume scenarios, the SandboxClaim controller now performs dynamic volume mounting.

  • You can now explicitly set ops.alibabacloud.com/pause-enabled='false'.

  • Added support for sandbox monitoring metrics. The metrics are generated and exposed in the same way as kube-state-metrics.

  • Sandboxes now support CPU vertical scaling by using Vertical Pod Autoscaler (VPA). This feature is disabled by default and can be enabled with the FeatureGate SandboxInPlaceResourceResizeGate=true.

  • Added protection against accidental Pod deletion with a pod validating webhook.

  • You can now modify pod labels when acquiring a sandbox with a SandboxClaim.

This update has no impact on your services.