Agent Sandbox (Kubernetes SIG Apps)
Kubernetes CRD and controller for isolated, stateful, singleton sandbox pods for agent runtimes and RL, with templates, claims and warm pools.
Tags
Description
The core Sandbox resource gives a pod a stable identity, persistent storage and lifecycle control (scheduled deletion, pause/resume); extensions add SandboxTemplate, SandboxClaim and SandboxWarmPool. Isolation is delegated to runtimes such as gVisor or Kata Containers via RuntimeClass.
Related
- E2B: Open-source, secure cloud sandboxes for AI agents: an isolated machine per agent to run code, browse and use tools.
- Anthropic Sandbox Runtime (srt): Lightweight OS-level sandbox enforcing filesystem and network restrictions on agents, MCP servers and arbitrary processes, without a container.
- Daytona: Secure and elastic infrastructure (sandboxes) for running AI-generated code.
Guides & comparisons
- DevOps and observability MCP servers compared (Comparison): Eight official MCP servers for infrastructure and operations work (Kubernetes, Terraform, Buildkite, Azure DevOps, Heroku, Datadog, Grafana and Sentry) compared on what they cover, where they run, how they authenticate and how far their read-only modes actually go.
- Self-hosted sandboxes for agents compared (Comparison): Six ways to isolate agent-run code on hardware you control (OpenSandbox, AIO Sandbox, microsandbox, Kubernetes Agent Sandbox, Anthropic's sandbox-runtime and Docker Sandboxes' local mode) compared on isolation, where they run, agent interface, network and secret controls, maturity and license.
Sources
Machine-readable
- JSON
- Markdown
- Source file on GitHub (edit via pull request)