Issues

• ci(e2e): cut fixed setup and teardown costs of the k3s conformance rows

  area:buildtopic:testing
  NVIDIA/OpenShell#5531 · Filter by author matthewgrossman opened on Nov 13, 2026

• ci(e2e): don't make the Branch E2E deb wait for the VM driver

  area:buildtopic:testing
  NVIDIA/OpenShell#5530 · Filter by author matthewgrossman opened on Nov 13, 2026

• feat(policy): triangulate process, destination, and recent session activity for egress

  state:triage-needed
  NVIDIA/OpenShell#5528 · Filter by author fitzyracing1 opened on Nov 12, 2026

• test(testkit): separate destructive tests from non-destructive ones

  topic:testing
  NVIDIA/OpenShell#5527 · Filter by author matthewgrossman opened on Nov 12, 2026

• bug(supervisor): wait() survives only one boundary transport loss; the second is fatal without a reattach attempt

  state:triage-needed
  Bug

  NVIDIA/OpenShell#5525 · Filter by author mr-miles opened on Nov 12, 2026

• docs: clarify GraphQL operation rules only cover inspected WebSocket text frames

  NVIDIA/OpenShell#5523 · Filter by author fcano opened on Nov 12, 2026

• feat(providers): define shared restrictions for profile environment keys

  state:triage-needed
  NVIDIA/OpenShell#5521 · Filter by author feloy opened on Nov 12, 2026

• bug(e2e): file_transfer::upload_download_round_trip stalls on the k3s-ha conformance row

  NVIDIA/OpenShell#5520 · Filter by author elezar opened on Nov 12, 2026
  1

• Use .gitignore also for downloads

  state:triage-needed
  NVIDIA/OpenShell#5514 · Filter by author pschoen-itsc opened on Nov 12, 2026

• bug(vm): on-failure restart never completes because the preserved overlay fails e2fsck

  area:drivers
  NVIDIA/OpenShell#5507 · Filter by author matthewgrossman opened on Nov 12, 2026
  2

• feat(observability): export shared-supervisor traces and OCSF logs via OTLP

  state:triage-needed
  NVIDIA/OpenShell#5505 · Filter by author HarryMoss opened on Nov 12, 2026

• Helm chart: let the gateway Service be a configurable LoadBalancer (annotations, source ranges, a Service port separate from the gateway's listening port)

  state:triage-needed
  NVIDIA/OpenShell#5500 · Filter by author cv opened on Nov 11, 2026

• feat(kubernetes): inherit operator-assigned sandbox UID/GID from tenant namespaces

  Enhancement

  NVIDIA/OpenShell#5494 · Filter by author drew opened on Nov 11, 2026
  2

• bug(kubernetes): a ResourceQuota or LimitRange rejecting the workspace PVC leaves the sandbox in Provisioning for 300 s with an unrelated message

  state:triage-needed
  NVIDIA/OpenShell#5491 · Filter by author jhjaggars opened on Nov 11, 2026
  1

• refactor(triage): mark stale closures with stable metadata

  NVIDIA/OpenShell#5487 · Filter by author purp opened on Nov 11, 2026
  

• Configurable sandbox concurrent-connection limit (MAX_NETWORK_STREAMS = 96), and a denial reason that names it

  state:triage-needed
  NVIDIA/OpenShell#5486 · Filter by author oleg-savko opened on Nov 11, 2026

• feat(docker): support workload image updates preserving sandbox identity and data

  state:triage-needed
  NVIDIA/OpenShell#5484 · Filter by author senthilr-nv opened on Nov 11, 2026

• feat(helm): let OpenShift assign the gateway's UID and fsGroup without value overrides

  state:triage-needed
  NVIDIA/OpenShell#5483 · Filter by author gaveezy opened on Nov 11, 2026

• feat: narrow filesystem access for child processes through the sandbox binary

  state:triage-needed
  NVIDIA/OpenShell#5482 · Filter by author Kimiyu-186 opened on Nov 11, 2026

• The persistent storage of gateway is considered to be placed in ETCD/k8s CR

  state:triage-needed
  NVIDIA/OpenShell#5481 · Filter by author laik opened on Nov 11, 2026

• chore(sdk/ts): migrate the TypeScript SDK to ai-openshell/sdk-typescript

  area:sdk:typescriptarea:sdk
  NVIDIA/OpenShell#5480 · Filter by author pimlock opened on Nov 11, 2026
  

• bug(kubernetes): sandboxes cannot start under the EKS Nitro Sandbox RuntimeClass because the workspace PVC is mounted at two paths

  state:triage-needed
  NVIDIA/OpenShell#5476 · Filter by author arun-elr opened on Nov 10, 2026
  3

• Support Gateway-authenticated token grants with client-selected header formats

  state:triage-needed
  NVIDIA/OpenShell#5473 · Filter by author freeqaz-openai opened on Nov 10, 2026
  1

• test(perf): decide whether to bring back the live-Internet and data-path benchmarks

  topic:testing
  NVIDIA/OpenShell#5472 · Filter by author matthewgrossman opened on Nov 10, 2026

• feat(observability): link sampled supervisor request spans to workload traces

  state:triage-needed
  NVIDIA/OpenShell#5471 · Filter by author afourniernv opened on Nov 10, 2026