v1.0.3

# 🚀 Announcing Agent Sandbox v1.0.3!

We're excited to announce the release of **Agent Sandbox v1.0.3**! This release introduces configurable TLS controls for the controller and router, resolves process group leaks in `sandboxd`, optimizes namespace deletion handling, enhances Python SDK type safety with PEP 561 support, extended pluggable agent toolsets & in-cluster Agent Client Protocol (ACP) server, and brings extensive new blueprints for enterprise fleet management, execution-scoped credentials, and advanced network policies.

### Key Highlights

#### Core Controller & Runtime Stability
* **Process Group Cleanup in `sandboxd` (#1379):** Replaced default process cancellation with process group termination (`-PGID`), preventing orphan descendant processes from leaking when clients disconnect from commands executed in sandboxes.
* **Namespace Deletion Requeue Optimization (#1617):** Improved Sandbox controller reconciliation during namespace termination by intercepting `NamespaceTerminatingCause` errors and requeuing without logging errors or triggering exponential backoff storms during bulk deletions.
* **Configurable TLS Profiles (#1595):** Added CLI flags, environment variables, and configuration options (`--tls-min-version`, `--tls-cipher-suites`, `--metrics-secure-serving`, and `--metrics-cert-dir`) to customize TLS versions and cipher suites for the controller metrics server and `sandbox-router`.

#### Python SDK & Client Tooling
* **Comprehensive Type Annotations (#794):** Added strict typing annotations across the `k8s-agent-sandbox` client package, bundled the PEP 561 `py.typed` marker, and improved null-safety and error handling across async connectors and snapshot utilities.

#### Enterprise Blueprints & Reference Architectures
* **OpenClaw Enterprise Fleet Blueprint (#1652, #1656):** Added `openclaw-fleet-gke`, an enterprise-grade reference architecture demonstrating warm-pool provisioning, per-employee persistent Filestore storage, out-of-band config injection, online dynamic PVC expansion, and Gateway API routing.
* **Execution-Scoped Credentials (#1644):** Added `examples/containarium-execution-scoped-token` demonstrating short-lived, per-execution credential injection via `ProcessConfig.env_vars` with instant revocation upon process exit and network isolation via Cilium NetworkPolicy.
* **Cluster-Wide Egress Control (#1646):** Added `examples/network-policy-api-sandbox`, showcasing multi-tier egress management and domain name filtering using the SIG Network `ClusterNetworkPolicy` API with `kube-network-policies`.
* **Pluggable Agent Toolsets & In-Cluster ACP Server (#1457, #1586):** Extended `sandboxed-tools` with modular toolsets (including Gemini CLI parity in Go) and an in-cluster Agent Client Protocol (ACP) JSON-RPC server with client permission prompts.

#### Testing, Scalability & Operations
* **Scalability & CI Test Hardening (#1624, #1626, #1623, #1546, #1551):** Enhanced scalability test presubmits with JUnit XML metric-gate outputs, startup readiness polling, retry loops for cluster provisioning, and refined flake classification to prevent false-alarm infra failures.
* **Example Test Coverage (#1608):** Added unit test suites covering security-critical logic, path traversal guards, allowlists, and mutating webhook JSON patch generators across example workloads.
* **Performance Tuning & Lifecycle Guidance (#1359, #1587):** Published a performance tuning guide for high-throughput deployments (`docs/performance-tuning.md`), clarified `restartPolicy` interactions with sandbox TTL cleanups, and updated controller metrics references with auto-generation tooling (#1444).

### Installation

#### Standard Install (Core + Extensions)
Recommended for most users and GitOps engines (Argo CD, Config Sync, kustomize):
```bash
kubectl apply -f https://github.com/kubernetes-sigs/agent-sandbox/releases/download/v1.0.3/sandbox-with-extensions.yaml
```

#### Selective Install
Install components separately:
```bash
# Core only:
kubectl apply -f https://github.com/kubernetes-sigs/agent-sandbox/releases/download/v1.0.3/sandbox.yaml

# Extensions (opt-in):
kubectl apply -f https://github.com/kubernetes-sigs/agent-sandbox/releases/download/v1.0.3/extensions.yaml
```

#### Python SDK
```bash
pip install k8s-agent-sandbox==1.0.3
```

--------
### Contributors
We extend our sincere thanks to all contributors to this release:
@aditya-shantanu, @alexatakvelon, @aojea, @app/dependabot, @dongjiang1989, @esposem, @hsinhoyeh, @janetkuo, @justinsb, @lunarwhite, @sanjay7178, @vvoronko

### New Contributors
* @sanjay7178 made their first contribution in https://github.com/kubernetes-sigs/agent-sandbox/pull/794
* @aojea made their first contribution in https://github.com/kubernetes-sigs/agent-sandbox/pull/1646

**Full Changelog**: https://github.com/kubernetes-sigs/agent-sandbox/compare/v1.0.2...v1.0.3