K8E v1.37.0-20261023-rc2 — Sandbox features & fixes

Aggregated from tag v1.37.0-20261015-nightly+k8e2 to the latest tag v1.37.0-20261023-rc2 (2026-10-23): 104 commits.

Features

  • feat(sandbox): unify session model — the warm pool now carries workspace PVCs, so every sandbox session is persistent; claiming a warm pod yields a persistent VM with a PVC workspace.
  • feat(sandboxmcp): enroll gateway identity from API key at startup (KIP-30 M2).
  • feat(sandboxmcp): publish the k8e-mcp release image and tolerate control-plane taint.
  • feat(sandbox): warm-pool node/runtime-class awareness (KIP-30 M3.3).
  • feat(sandbox): leader-gated gateway EndpointSlice (KIP-30 M3.1).
  • feat(sandbox): mirror the server cert into sandbox-e2b (KIP-30 M3.2).
  • feat(sandboxcli): MCP config block + TLS export-CA (KIP-30 M3.4).
  • feat(sandbox): --skip-node-runtime-labels opt-out (KIP-30 M3.3).
  • feat(install): installer polish and docs alignment with K8E capabilities.

Bug fixes

  • fix(sandboxcli,gateway): run --raw prints plain text and reports the real exit code; the e2b surface is served over the Gateway's :443 listener (#671).
  • fix(sandbox): pick the sandboxd binary by TARGETARCH instead of forcing amd64 (#673).
  • fix(sandboxd): escape C0 control chars in JSON so coloured output survives.
  • fix(sandboxd): report the changed entry's name in watch events.
  • fix(sandbox): four E2B SDK 2.56.0 compatibility fixes.
  • fix(e2b): real command exit codes, pod-IP wait after resume, warm-pool status.
  • fix(sandboxmatrix): failing session-create rollback, warm-pod PVC retirement ordering, unchanged-Secret write skipping, Register complexity, PVC owner, node-label retry, warm-pod UUID naming, IPv6 support, Secret fingerprint check, rate-limit buckets, env-var guards.

Docs

  • README slimmed and re-focused, tutorials moved to k8e.sh, brand assets, KIP-30 docs status.

Maintenance

  • chore / refactor / style / test / ci: zig fmt, build fixes, DeepSource/SonarCloud findings, E2E CI, release pipeline.

Full Changelog: https://github.com/xiaods/k8e/compare/v1.37.0-20261015-nightly+k8e2...v1.37.0-20261023-rc2

Try it

curl -sfL https://k8e.sh/install.sh | sh -

Then connect your AI agent (Claude Code, Codex, or Pi) with the standalone k8e-sandbox-cli. See the Getting Started guide.

Last Updated: