M3

Open

Overdue by 6 day(s)

•

Due by October 26, 2026

•Last updated Oct 31, 2026

This is the planned Substrate v1.0 milestone in preparation for KubeCon North America 2026.
All feature changes must be merged by Oct 26, 2026 to leave time for a 1-week release stabilization.

89% complete

OOMKill can take down entire worker
agent-substrate/substrate#3092 · opened on Oct 21, 2026 · M3
8
[Epic] Snapshot GC improvements
Task
agent-substrate/substrate#1510 · opened on Sep 5, 2026 · M3
4
System Upgrade E2E
Task
agent-substrate/substrate#1784 · opened on Sep 21, 2026 · M3
6
Add a doc page for the EgressPolicy API
Task
agent-substrate/substrate#1993 · opened on Sep 29, 2026 · M3
Document how people, pods and CI jobs should authenticate to ate-api
Unread
#3119 opened Oct 22, 2026 · Updated Oct 29, 2026
[Bug]: Node-local snapshots from async suspends can fill a node's disk; kubelet then evicts the workers and atelet, and the node stays in DiskPressure
agent-substrate/substrate#3101 · opened on Oct 22, 2026 · M3
3
Fix quickstart setup instructions
Unread
#3016 opened Oct 20, 2026 · Updated Oct 27, 2026
9
[Bug Bash] Install a new SandboxConfig per release instead of updating the class default in place
agent-substrate/substrate#3253 · opened on Oct 26, 2026 · M3
[bug-bash] ResumeActor attempts ROOTFS restore across CPU architectures instead of dropping to VOLUMES
agent-substrate/substrate#3230 · opened on Oct 26, 2026 · M3
2
hack: reject proto changes that break binary wire compatibility
Unread
#1607 opened Sep 11, 2026 · Updated Oct 27, 2026
21
objectstore plugin: what an out-of-tree provider needs, with and without per-actor credentials
agent-substrate/substrate#3095 · opened on Oct 21, 2026 · M3
6
atelet: run at system-node-critical
Unread
#3328 opened Oct 27, 2026 · Updated Oct 30, 2026
11
UpdateTag accepts tags that are being deleted
Bug
agent-substrate/substrate#3333 · opened on Oct 27, 2026 · M3
2
Add pkg/objectstore/actorauthz so out-of-tree object-store providers can run the actor checks
Unread
#3358 opened Oct 27, 2026 · Updated Oct 31, 2026Draft
16
[Bug]: After an unclean node reboot, atelet's caches serve zero-length entries and every restore on the node fails
agent-substrate/substrate#3351 · opened on Oct 27, 2026 · M3
5
atunnel, atenet-router and the egress gateway limit kernel send queues behind slow readers
Unread
#3320 opened Oct 27, 2026 · Updated Oct 30, 2026
65
Tighten worker permissions with runtime-specific defaults
Unread
#2428 opened Oct 9, 2026 · Updated Nov 1, 2026
56
ate-setup: reconcile ate-api-server ConfigMaps and roll out on config changes
Unread
#3370 opened Oct 28, 2026 · Updated Oct 30, 2026
7
atepg: Switch to Serializable isolation level for transactions by default
Unread
#3475 opened Oct 30, 2026 · Updated Oct 30, 2026
24
Resuming a microVM actor on the same node no longer reads its rootfs upper back from disk
Unread
#3485 opened Oct 30, 2026 · Updated Oct 31, 2026
31
tools: remove setup-gcp and hack/teardown.sh
Unread
#3396 opened Oct 28, 2026 · Updated Oct 30, 2026
17
[Bug Bash] microVM: set containerd's default masked and read-only paths
Unread
#3249 opened Oct 26, 2026 · Updated Nov 1, 2026
20
Verify actor JWTs in the credential exchange through OIDC discovery
Unread
#3447 opened Oct 29, 2026 · Updated Oct 31, 2026
26
tools: remove setup-gcp and hack/teardown.sh
Unread
#3505 opened Oct 30, 2026 · Updated Oct 31, 2026
8

Issues