Issues

• microVM: virtiofsd holds one fd per looked-up inode; large homes hit RLIMIT_NOFILE and every guest open() fails with ENFILE

  area/microVMarea/storagekind/bug
  agent-substrate/substrate#3115 · Filter by author AlexBulankou opened on Oct 22, 2026

• [Bug]: Node-local snapshots from async suspends can fill a node's disk; kubelet then evicts the workers and atelet, and the node stays in DiskPressure

  kind/bug
  agent-substrate/substrate#3101 · Filter by author chw120 opened on Oct 22, 2026
  1

• atenet-router: size actor_connect's circuit breakers

  area/network
  Task

  agent-substrate/substrate#3100 · Filter by author yufan-su opened on Oct 22, 2026
  

• Add actorIdentityCertificate as a SystemInfo volume data source

  area/identityarea/securitykind/feature
  agent-substrate/substrate#3099 · Filter by author thompsonmax opened on Oct 22, 2026

• Delete misses node state for a sync-suspended actor or a failed detach report

  agent-substrate/substrate#3098 · Filter by author igooch opened on Oct 21, 2026
  1

• objectstore plugin: what an out-of-tree provider needs, with and without per-actor credentials

  area/storagekind/design
  agent-substrate/substrate#3095 · Filter by author ILLUM1N0X opened on Oct 21, 2026
  

• OOMKill can take down entire worker

  area/nodearea/securitykind/bug
  agent-substrate/substrate#3092 · Filter by author BenTheElder opened on Oct 21, 2026 · M3
  4

  

• Fix Actor Memory Overhead Model

  area/apiarea/node
  agent-substrate/substrate#3091 · Filter by author BenTheElder opened on Oct 21, 2026 · M3
  4

  

• [Bug]: Benchmarks dial removed plaintext port 80 on atenet-router

  area/benchmarkingkind/bug
  agent-substrate/substrate#3088 · Filter by author sairajp-rewind opened on Oct 21, 2026
  

• atelet: move to a new image cache directory when the layout version changes

  area/nodearea/storagekind/feature
  agent-substrate/substrate#3075 · Filter by author igooch opened on Oct 21, 2026
  1

• Improve atenet-egress envoy config for higher scale

  area/network
  Task

  agent-substrate/substrate#3074 · Filter by author yufan-su opened on Oct 21, 2026
  

• ActorTemplate validation accepts a declared volume that no container mounts, contrary to the API guide

  area/apiarea/api-machinerykind/bug
  Bug

  agent-substrate/substrate#3069 · Filter by author aditya-shantanu opened on Oct 21, 2026
  1

• [Feature] Actor hold: block resume of a suspended actor until released

  area/apiarea/api-machinerykind/feature
  agent-substrate/substrate#3066 · Filter by author danehans opened on Oct 21, 2026

• [Feature] Execution-conditional SuspendActor, ResumeActor and DeleteActor

  area/apiarea/api-machinerykind/feature
  agent-substrate/substrate#3065 · Filter by author danehans opened on Oct 21, 2026

• Release agent-substrate organization from Alphabet GitHub Enterprise

  area/dev-infrakind/cleanup
  agent-substrate/substrate#3062 · Filter by author zlammerts-svg opened on Oct 21, 2026
  

• Replace Google CLA with Developer Certificate of Origin (DCO)

  area/dev-infrakind/docskind/feature
  agent-substrate/substrate#3061 · Filter by author zlammerts-svg opened on Oct 21, 2026
  1

• [Tracking] CNCF Sandbox Project Onboarding

  area/dev-infrakind/feature
  Task

  agent-substrate/substrate#3060 · Filter by author zlammerts-svg opened on Oct 21, 2026

• ate.workerpool.workers is double counted when ate-api-server runs more than one replica

  area/api-machineryarea/observabilitykind/bug
  agent-substrate/substrate#3055 · Filter by author git286 opened on Oct 21, 2026
  2

• atelet reports every wrapped worker or plugin gRPC status as Internal, so ateapi crashes actors on transient failures the worker marked Unavailable

  area/api-machineryarea/nodearea/reliabilitykind/bug
  agent-substrate/substrate#3046 · Filter by author aditya-shantanu opened on Oct 21, 2026

• Make default Postgres Isolation level to Serializable

  area/api-machinerykind/design
  agent-substrate/substrate#3044 · Filter by author SHRUTI6991 opened on Oct 21, 2026
  

• Support replacing built-in egress policy enforcement with an external ext_proc

  area/networkarea/securitykind/feature
  agent-substrate/substrate#3040 · Filter by author sambhav opened on Oct 21, 2026

• [Medium] Restrict Tag creation, publishing, and cloning in OpenFGA to prevent cross-actor secret exfiltration by atespace editors

  area/api-machineryarea/securitykind/feature
  agent-substrate/substrate#3035 · Filter by author destijl opened on Oct 21, 2026
  1

  

• [Low] Guard MaxExpirationSeconds nil pointer and minimum lifetime in podidentitysigner and servicednssigner

  area/securitykind/bug
  agent-substrate/substrate#3034 · Filter by author destijl opened on Oct 21, 2026
  

• [Low] Bind k8s-credential-provider /statusz to 127.0.0.1:4040 by default

  area/networkarea/securitykind/bug
  agent-substrate/substrate#3033 · Filter by author destijl opened on Oct 21, 2026
  

• [Medium] Reload actor-identity CA bundle (actor-id-ca-certs) on rotation in atenet-egress and atenet-router

  area/networkarea/securitykind/bug
  agent-substrate/substrate#3032 · Filter by author destijl opened on Oct 21, 2026