From 9613e41d21139234ed501bd05e96065cb5fe9e41 Mon Sep 17 00:00:00 2001
From: Zach <3724288+zedkipp@users.noreply.github.com>
Date: Tue, 24 Feb 2026 11:33:37 -0700
Subject: [PATCH] chore: update boundary version (#22289)

Updating to the latest tag before the 2.31 code freeze.
---
 docs/reference/cli/boundary.md                       | 10 ++++++++++
 enterprise/cli/testdata/coder_boundary_--help.golden |  4 ++++
 go.mod                                               |  2 +-
 go.sum                                               |  4 ++--
 4 files changed, 17 insertions(+), 3 deletions(-)

diff --git a/docs/reference/cli/boundary.md b/docs/reference/cli/boundary.md
index 9b18c8a493..79af765679 100644
--- a/docs/reference/cli/boundary.md
+++ b/docs/reference/cli/boundary.md
@@ -118,6 +118,16 @@ Jail type to use for network isolation. Options: nsjail (default), landjail.
 
 Use real DNS in the jail instead of the dummy DNS (allows DNS exfiltration). Default: false.
 
+### --no-user-namespace
+
+|             |                                          |
+|-------------|------------------------------------------|
+| Type        | <code>bool</code>                        |
+| Environment | <code>$BOUNDARY_NO_USER_NAMESPACE</code> |
+| YAML        | <code>no_user_namespace</code>           |
+
+Do not create a user namespace. Use in restricted environments that disallow user NS (e.g. Bottlerocket in EKS auto-mode).
+
 ### --disable-audit-logs
 
 |             |                                  |
diff --git a/enterprise/cli/testdata/coder_boundary_--help.golden b/enterprise/cli/testdata/coder_boundary_--help.golden
index 257981b3fe..74f46947c1 100644
--- a/enterprise/cli/testdata/coder_boundary_--help.golden
+++ b/enterprise/cli/testdata/coder_boundary_--help.golden
@@ -37,6 +37,10 @@ OPTIONS:
           Path to the socket where the boundary log proxy server listens for
           audit logs.
 
+      --no-user-namespace bool, $BOUNDARY_NO_USER_NAMESPACE
+          Do not create a user namespace. Use in restricted environments that
+          disallow user NS (e.g. Bottlerocket in EKS auto-mode).
+
       --pprof bool, $BOUNDARY_PPROF
           Enable pprof profiling server.
 
diff --git a/go.mod b/go.mod
index 34311c1d63..cf003256d0 100644
--- a/go.mod
+++ b/go.mod
@@ -475,7 +475,7 @@ require (
 	github.com/coder/agentapi-sdk-go v0.0.0-20250505131810-560d1d88d225
 	github.com/coder/aibridge v1.0.6
 	github.com/coder/aisdk-go v0.0.9
-	github.com/coder/boundary v0.8.0
+	github.com/coder/boundary v0.8.3
 	github.com/coder/preview v1.0.4
 	github.com/danieljoos/wincred v1.2.3
 	github.com/dgraph-io/ristretto/v2 v2.4.0
diff --git a/go.sum b/go.sum
index c6d0bc82a4..908a7aa4c6 100644
--- a/go.sum
+++ b/go.sum
@@ -932,8 +932,8 @@ github.com/coder/aibridge v1.0.6 h1:RVcJCutgWAd8MOxNI5MNVBl+ttqShVsmMQvUAkfuU9Q=
 github.com/coder/aibridge v1.0.6/go.mod h1:c7Of2xfAksZUrPWN180Eh60fiKgzs7dyOjniTjft6AE=
 github.com/coder/aisdk-go v0.0.9 h1:Vzo/k2qwVGLTR10ESDeP2Ecek1SdPfZlEjtTfMveiVo=
 github.com/coder/aisdk-go v0.0.9/go.mod h1:KF6/Vkono0FJJOtWtveh5j7yfNrSctVTpwgweYWSp5M=
-github.com/coder/boundary v0.8.0 h1:g/H6VIGY4IoWeKkbvao7zhO1BAQe7upSHfHzoAZxdik=
-github.com/coder/boundary v0.8.0/go.mod h1:7LXg454okcxIQm08GouuvoWjH1uGkHdbEXiPbZgzcQk=
+github.com/coder/boundary v0.8.3 h1:QOb5WYKieRH/gwyUgofC9FDHSSJHpdw1jTrB5zsHovA=
+github.com/coder/boundary v0.8.3/go.mod h1:7LXg454okcxIQm08GouuvoWjH1uGkHdbEXiPbZgzcQk=
 github.com/coder/bubbletea v1.2.2-0.20241212190825-007a1cdb2c41 h1:SBN/DA63+ZHwuWwPHPYoCZ/KLAjHv5g4h2MS4f2/MTI=
 github.com/coder/bubbletea v1.2.2-0.20241212190825-007a1cdb2c41/go.mod h1:I9ULxr64UaOSUv7hcb3nX4kowodJCVS7vt7VVJk/kW4=
 github.com/coder/clistat v1.2.0 h1:37KJKqiCllJsRvWqTHf3qiLIXX0JB6oqE5oxcqgdLkY=