Repository navigation
v1.0.0
CubePilot is the intelligent assistant of the CubeStack platform: a per-user agent instance (Pod + PVC) managed by the Instance Manager, and a conversational portal whose agent runs kubectl under least privilege with simple HITL approval.
Highlights
- Control-plane objects —
AgentTemplate,AgentInstance,Skill,TaskTemplate,Task, andTaskRunas cluster-scoped CRDs. - Per-user instances — a self-healing Runtime Pod with a dedicated PVC, so sessions and memory survive instance rebuilds; pods run non-root with seccomp,
ALLcapabilities dropped, and an egress allowlist. - Tool execution & approvals — generic
kubectlexecution with schema discovery, and confirm-on-write approvals addressed by approval id, with the gateway as the source of truth. - Skill market — publish, install, and hot-reload skills from the portal, with per-instance skill and config injection.
- Scheduled inspection — preset task templates (including daily inspection) driven by the CRD scheduler, with recorded TaskRuns and reports.
- Portal — chat over SSE (floating window + dedicated tab) plus config, skill, and task pages.
Changes since v0.1.0
Features
- Answer in the language the user asked in
- Show the agent's between-tool narration
- Clear a conversation from the client
- Answer an
ask_userquestion with the human's own text - More preset task templates, with the skills they need
- Cluster-scoped read for the assistant identity
- Keep the pod's platform config owned and convergent
- Configurable log level platform-wide
- Pin the workspace PVC StorageClass
Fixes
- Revoke the per-user identity and stop trusting leftover bindings
- Re-attach to a parked turn so an answer's output reaches the tab
- Fix a panic on the first "allow always" when
Datais nil
Install
helm install cubepilot oci://harbor.isuanova.com/suanova/cubepilot-chart --version 1.0.0Artifacts
- Images:
harbor.isuanova.com/suanova/cubepilot-{openclaw,operator,api,web}:1.0.0 - Chart:
oci://harbor.isuanova.com/suanova/cubepilot-chart:1.0.0
Patch releases for the 1.0 line land on the release-1.0 branch.
Full Changelog: v0.1.0...v1.0.0