volcano-sh / volcano-sh/agentcube
Using ENV instead of secret for codeinterpreter sandbox public key injection
Open
@aaradhychinche-alt is already working on this.
Since Jan 23, 2026.
kind/enhancement
- Dominant language
- Go
- Stars
- 167
- Forks
- 88
- Avg merge
- 44m
- Merged PRs (30d)
- 1
Description
In the current version, the public key from workloadmgr is injected into codeinterpreter by mounting a secret, which is used for authentication on the init interface.
However, this approach brings two issues:
- Secrets cannot be mounted across namespaces.
- Multiple workloadmgr instances will have multiple public-private key pairs.
The solution is to modify the implementation to use ENV to mount the public key into the codeinterpreter sandbox.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.