0.4.0 CubePod 0.4.0

Features and improvements

E2B-compatible template catalog and OCI image builds (CEP-0019). Added full PodTemplate lifecycle management, E2B-compatible /templates catalog endpoints, cubepod template CLI and SDK support, and OCI template build pipelines (cubepod-controller + local Docker builder). See Template Catalog & Builds.
Transparent zero-trust egress and per-Pod mTLS secret lifecycle (CEP-0020). Added TLS ClientHello SNI inspection, selective Ephemeral CA HTTPS MITM cpodref_ placeholder swapping, allowlist DNS responder, iptables transparent redirection, and automatic per-Pod <box>-egress-mtls / <box>-egress-ca Secret provisioning and GC. See Zero-Trust Egress & Secrets.
Lazy-activated interactive desktop and signed panel proxy (CEP-0021). Added the cubepod-desktop image (Ubuntu 24.04, Xvfb, Openbox, Playwright Chromium CDP, x11vnc/noVNC, ttyd) with zero boot overhead until /sandboxes/{id}/desktop/start is invoked, alongside signed /panel/{token}/ HTTP/WebSocket proxy routes. See Interactive Desktop & Panel Proxy.
Crash-consistent multi-generation CoW fork and stateless gateway HA (CEP-0022). Added bounded FIFREEZE/FITHAW quiesce/thaw in podd with a monotonic watchdog, local cp --reflink=auto --sparse=always CoW cloning, multi-generation <parent>-rootfs-gen<N>-pvc ForkFrom support in Kubernetes, and stateless multi-replica cubepod-gateway HA discovery via live PodBox CRDs. See Lifecycle, WarmPool & CoW Fork.
Multi-language Code Interpreter kernels and official Python / TypeScript SDKs. Added stateful 1000:1000 in-guest kernels for python, bash, javascript, typescript, r, and java; shipped cubepod 0.4.0 on PyPI (Python SDK) and cubepod 0.4.0 on npm (TypeScript SDK); and added Kata Containers (kata-qemu / kata-clh) benchmark tooling.

Before upgrading

Apply the updated CRDs (PodBox, PodTemplate, PodWarmPool) before upgrading with Helm, as PodTemplate and new PodBox fields were introduced in 0.4.0:

kubectl apply -f deploy/helm/cubepod/crds/

Upgrade all control-plane images (cubepod-controller, cubepod-gateway, cubepod-egress) together with cubepod-podd:v0.4.0 per the Kubernetes & Helm deployment guide.

GitHub Release · Full changes since 0.3.1