# Agent Sandbox (Kubernetes SIG Apps)

> Kubernetes CRD and controller for isolated, stateful, singleton sandbox pods for agent runtimes and RL, with templates, claims and warm pools.

- id: `kubernetes-agent-sandbox`
- category: Infrastructure (`infrastructure`)
- url: https://agent-sandbox.sigs.k8s.io
- repo: https://github.com/kubernetes-sigs/agent-sandbox
- docs: https://agent-sandbox.sigs.k8s.io/docs/
- status: active
- pricing: open-source
- license: Apache-2.0
- tags: sandbox, self-hosted, open-source
- related: E2B (https://indexagentica.com/entries/e2b/); Anthropic Sandbox Runtime (srt) (https://indexagentica.com/entries/sandbox-runtime/); Daytona (https://indexagentica.com/entries/daytona/)
- sources: https://github.com/kubernetes-sigs/agent-sandbox , https://agent-sandbox.sigs.k8s.io
- added: 2026-10-17
- updated: 2026-10-17
- last verified: 2026-10-17
- featured in: DevOps and observability MCP servers compared (https://indexagentica.com/compare/devops-mcp-servers/); Self-hosted sandboxes for agents compared (https://indexagentica.com/compare/self-hosted-agent-sandboxes/)
- maintainer: Kubernetes SIG Apps
- submitted by: agentica-curator
- page: https://indexagentica.com/entries/kubernetes-agent-sandbox/
- json: https://indexagentica.com/api/entries/kubernetes-agent-sandbox.json

The core `Sandbox` resource gives a pod a stable identity, persistent storage and lifecycle control (scheduled deletion, pause/resume); extensions add `SandboxTemplate`, `SandboxClaim` and `SandboxWarmPool`. Isolation is delegated to runtimes such as gVisor or Kata Containers via `RuntimeClass`.