All issues

Search results

kagent WorkerPool spans AMD generations (m7a and c5ad): golden snapshots taken on gen 7 cannot restore on gen 5 workers, half of the default agent's cold turns fail after 60 s

Status: Open.

#457 In giantswarm/agent-platform;

· teemow opened on Sep 14, 2026

Every agent turn ends 3 s late: actors cannot reach the OTLP gateway (no substrate-atenet-egress rule) and the ADK's pre-response trace flush burns its full 3 s deadline

Status: Open.

#456 In giantswarm/agent-platform;

· teemow opened on Sep 14, 2026

verify-engine: check that charts/flux-engine/crds/ match the pinned Flux Operator release, not only that appVersion equals the image tag

Status: Open.

#454 In giantswarm/agent-platform;

· teemow opened on Sep 14, 2026

Karpenter installations: the stateful singletons (klaus-gateway, muster-valkey) run on spot capacity; #431's do-not-disrupt + PDB do not cover a spot reclaim

Status: Open.

#439 In giantswarm/agent-platform;

· teemow opened on Sep 14, 2026

Provision the Substrate snapshot store on CAPA through the chart: Crossplane S3 bucket + IRSA role like the kagent-pg backup bucket, the snapshot location derived, the role annotation forwarded to atelet and ate-api-server

Status: Open.

#411 In giantswarm/agent-platform;

· teemow opened on Sep 12, 2026

feat(connectivity): the bundled mcp-kubernetes registers as a family member (cluster + family) or not at all — a single-installation deployment gets the same x_kubernetes_* family UX as the fleet

Status: Open.

#403 In giantswarm/agent-platform;

· teemow opened on Sep 12, 2026

docs/feat(connectivity): Substrate actors on Cilium socket-LB cannot resolve names over UDP — the actor's query leaves the worker with the kube-dns ClusterIP untranslated (world, denied); document socketLB.hostNamespaceOnly: true as a prerequisite and ship the worker resolver knob

Status: Open.

#386 In giantswarm/agent-platform;

· teemow opened on Sep 11, 2026

feat(connectivity): network policies for Substrate's bundled Postgres and rustfs — an installation running them under default-deny has to write its own

Status: Open.

#381 In giantswarm/agent-platform;

· teemow opened on Sep 11, 2026

fix(connectivity): the agent-manager migrate Job races its CiliumNetworkPolicy (Helm applies the CRD kind after the Job) and a Failed Job stalls the connectivity upgrade despite disableWaitForJobs

Status: Open.

#378 In giantswarm/agent-platform;

· teemow opened on Sep 11, 2026

fix(connectivity): BackendTrafficPolicy renders spec.targetRefs[].namespace, which Envoy Gateway >= 1.1 does not declare — the connectivity upgrade fails with 'field not declared in schema' when ingress.backendTrafficPolicy is on

Status: Open.

#377 In giantswarm/agent-platform;

· teemow opened on Sep 11, 2026

Document the private-skills credential contract of the kagent API v2 line: the tenant's Secret in the kagent namespace, no Harness credential, where the token is visible; verify the pinned kagent-crds serve credentialRef (D8/D17)

Status: Open.

#369 In giantswarm/agent-platform;

· teemow opened on Sep 11, 2026

fix(connectivity): the substrate-bootstrap and postgres-databases hook Jobs have no network policy — under Cilium policyEnforcementMode always the pre-upgrade hook cannot reach the apiserver and every connectivity upgrade fails

Status: Open.

#367 In giantswarm/agent-platform;

· teemow opened on Sep 11, 2026