Esta página se muestra en inglés. Una traducción al español está en curso.
ScriptsMay 11, 2026·2 min de lectura

Agent Sandbox — Run Agents Safely on Kubernetes

Agent Sandbox provides Kubernetes-first guardrails for agent workloads: resource limits, isolation, and repeatable environments so failures stay contained.

AI Open Source
AI Open Source · Community
Listo para agents

Este activo puede ser leído e instalado directamente por agents

TokRepo expone un comando CLI universal, contrato de instalación, metadata JSON, plan según adaptador y contenido raw para que los agents evalúen compatibilidad, riesgo y próximos pasos.

Stage only · 29/100Stage only
Superficie agent
Cualquier agent MCP/CLI
Tipo
Script
Instalación
Single
Confianza
Confianza: Established
Entrada
README.md
Comando CLI universal
npx tokrepo install 3f94c7c7-7f5e-4e7e-8a42-d3c4fd46eaff
contrato de instalaciónJSON de metadataplan adaptadorcontenido raw
Introducción

Agent Sandbox provides Kubernetes-first guardrails for agent workloads: resource limits, isolation, and repeatable environments so failures stay contained.

  • Best for: Teams running untrusted agent code who need isolation, quotas, and an auditable execution surface
  • Works with: Kubernetes clusters + CI; pair with policy-as-code and least-privilege service accounts
  • Setup time: 30 minutes

Practical Notes

  • Setup time ~30 minutes (apply manifests + run one sandboxed job)
  • Three hard checks: limits enforced, egress scoped, run logs retained
  • GitHub stars + forks (verified): see Source & Thanks

Agents get dangerous when they can run arbitrary code with long-lived credentials. A Kubernetes sandbox lets you bound blast radius: small quotas, short-lived identities, and auditable logs. Use it to make ‘agent execution’ an infrastructure primitive rather than an ad-hoc local script.

FAQ

Q: Do I need Kubernetes for agents? A: Not always—but it’s a strong default if you must isolate untrusted execution.

Q: What’s the first guardrail to add? A: Resource limits + restricted service accounts; then add egress controls.

Q: How do I make runs reproducible? A: Pin images/versions and treat manifests as code reviewed like any PR.

🙏

Fuente y agradecimientos

Source: https://github.com/kubernetes-sigs/agent-sandbox > License: Apache-2.0 > GitHub stars: 2,125 · forks: 253

Discusión

Inicia sesión para unirte a la discusión.
Aún no hay comentarios. Sé el primero en compartir tus ideas.

Activos relacionados

Docker Agent — Run Agent Tasks in Containers

Docker Agent packages agent workloads into containers so you get reproducible environments, clear boundaries, and safer runs than ad-hoc local scripts.

Scripts
AI Open Source

Microsoft Agent Framework — Build & Run Agent Workflows

Microsoft Agent Framework builds production-grade agents and multi-agent workflows in Python and .NET, with official docs and quickstarts for teams.

Scripts
Agent Toolkit

Agent Safehouse — Sandbox macOS Coding Agents

Agent Safehouse sandboxes local coding agents on macOS using sandbox-exec deny-first profiles, limiting access to only approved files and integrations.

Workflows
Agent Toolkit

mistral-inference — Run Mistral Models

Run Mistral models with minimal inference code. Install via pip, load a model, and build a local workflow before moving to larger deployments.

Scripts
AI Open Source
◈Inicio🔍Buscar👤Yo