agent-platform release v4.72.1

Fixed

  • The egress gateway reaches the Substrate credential provider (substrate-atenet-egress → k8s-credential-provider 50051), and the provider has its own policy (ingress from the gateway and the scrape port, egress to the apiserver) (giantswarm/giantswarm#37705). On the Substrate line from 1.1.0 the gateway asks the provider for every injected credential; without the hop each ask ended in UpstreamCallTimeout, the golden boot’s git fetch of a private skill got 403 and the AgentTemplate never left ActorTemplateRetrying. agentlab renders no network policies, so the gate could not see it.