-
Notifications
You must be signed in to change notification settings - Fork 922
Issues
is:issue state:open
is:issue state:open
Issue creation is restricted in this repository
Search results
feat: verify provider-authenticated call ingress before sandbox relay
state:triage-neededOpened without agent diagnostics and needs triageOpened without agent diagnostics and needs triageStatus: Open.#2167 In NVIDIA/OpenShell;feat: governed realtime media membrane
state:triage-neededOpened without agent diagnostics and needs triageOpened without agent diagnostics and needs triageStatus: Open.#2166 In NVIDIA/OpenShell;Approved mechanistic policy chunk rejects itself when a denial resubmits the same endpoint (dedup upsert id aliasing in SubmitPolicyAnalysis)
state:triage-neededOpened without agent diagnostics and needs triageOpened without agent diagnostics and needs triageStatus: Open.#2165 In NVIDIA/OpenShell;[DGX Spark] gateway never rewrites openshell:resolve:env: credential placeholder on sandbox egress — literal placeholder sent on the wire (works on DGX Station, same versions)
state:triage-neededOpened without agent diagnostics and needs triageOpened without agent diagnostics and needs triageStatus: Open.#2161 In NVIDIA/OpenShell;fix(sandbox): acknowledge initial policy load and expose SDK labels
state:triage-neededOpened without agent diagnostics and needs triageOpened without agent diagnostics and needs triageStatus: Open.#2159 In NVIDIA/OpenShell;[k8s driver] network_policies allowlist accepted by gateway but not propagated to proxy ACL (policy_denied)
state:triage-neededOpened without agent diagnostics and needs triageOpened without agent diagnostics and needs triageStatus: Open.#2158 In NVIDIA/OpenShell;feat: add warm-pool provisioning for Kubernetes sandboxes
area:clusterRelated to running OpenShell on k3s/dockerRelated to running OpenShell on k3s/dockerarea:sandboxSandbox runtime and isolation workSandbox runtime and isolation workstate:review-readyReady for human reviewReady for human reviewtest:e2e-kubernetesRequires Kubernetes end-to-end coverageRequires Kubernetes end-to-end coverageStatus: Open.#2157 In NVIDIA/OpenShell;feat(auth): support OIDC UserInfo validation for opaque access tokens
state:triage-neededOpened without agent diagnostics and needs triageOpened without agent diagnostics and needs triageStatus: Open.#2154 In NVIDIA/OpenShell;- Status: Open.
Docker driver: --gpu allocates GPU but driver libraries (libnvidia-ml.so) not visible inside sandbox
Status: Open.#2145 In NVIDIA/OpenShell;feat(policy): optional protocol-aware inbound authorization for gateway-less deployments
state:triage-neededOpened without agent diagnostics and needs triageOpened without agent diagnostics and needs triageStatus: Open.#2144 In NVIDIA/OpenShell;feat(auth): inbound caller authentication and authorization for sandbox-to-sandbox communication
state:triage-neededOpened without agent diagnostics and needs triageOpened without agent diagnostics and needs triageStatus: Open.#2143 In NVIDIA/OpenShell;