Skip to content

Changed SandboxClass from enum to string to allow extensibility - #2586

Merged
Julian Gutierrez Oschmann (juli4n) merged 1 commit into
agent-substrate:mainfrom
laoj2:sandbox-config
Oct 14, 2026
Merged

Julian Gutierrez Oschmann (juli4n) merged 1 commit into
agent-substrate:mainfrom
laoj2:sandbox-config

Conversation

@laoj2

@laoj2 Luiz Oliveira (laoj2) commented Oct 13, 2026 •

Copy link
Copy Markdown
Collaborator

Breaking change

An ActorTemplate's sandboxConfig.sandboxClass is now a string, gvisor or microvm, the same values the WorkerPool and SandboxConfig CRDs use. The SANDBOX_CLASS_GVISOR and SANDBOX_CLASS_MICROVM spellings are rejected.

To upgrade:

  • In ActorTemplate manifests and API requests, replace SANDBOX_CLASS_GVISOR with gvisor and SANDBOX_CLASS_MICROVM with microvm.
  • Go clients of pkg/proto/ateapipb: the SandboxClass enum is removed and SandboxConfig.SandboxClass is a string.
  • Existing ActorTemplates read back with an empty sandboxClass, because the stored enum value does not decode into the new string field. Templates are immutable, so delete them and their actors before upgrading and recreate them afterwards.
  • The SANDBOX CLASS column of kubectl ate get actortemplates now prints gvisor or microvm.

Fixes #2406

@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to a conflict with the base branch Oct 13, 2026
path: egress-trust-bundle/trust-bundle.pem
sandboxConfig:
sandboxClass: SANDBOX_CLASS_GVISOR
sandboxClass: gvisor

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

aside: we want to remove this field from actortemplate, cc Zoe Zhao (@zoez7)

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, will remove it this week.

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

needs rebase

Merged via the queue into agent-substrate:main with commit 9ec4975 Oct 14, 2026
9 checks passed
@laoj2
Luiz Oliveira (laoj2) deleted the sandbox-config branch October 15, 2026 13:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/api User-facing API changes breaking-change PRs with breaking changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

api: standardize sandbox_class representation across ateapi.proto (SandboxClass enum vs string)

4 participants