Agent Sandbox

Apache-2.0 Kubernetes Sandbox CRD + controller — warm pools for agent runtimes

AI Agents / Sandbox · Apache-2.0 · 4.3k

Reviewed 2026-10-08 · last push 2026-10-18 · repo checked 2026-10-19

What's Good

Apache-2.0 (kubernetes-sigs/agent-sandbox). Release v1.0.5. Install with one `kubectl apply` of the release manifest. Core `Sandbox` CRD handles lifecycle (create, scheduled delete, pause, resume) with persistent storage; extensions add `SandboxTemplate`, `SandboxClaim`, and `SandboxWarmPool` for pre-warmed allocation. Upstream Kubernetes project, not a vendor SaaS. ★~4.2k.

The Catch

It schedules and manages sandboxes; it does not isolate them. Isolation comes from the RuntimeClass you pair it with — gVisor (see the gvisor gem) or Kata Containers — and without one you just have ordinary pods. Assumes you already run and operate a Kubernetes cluster. Vs e2b (hosted sandbox API with an SDK): Agent Sandbox is the self-hosted orchestration layer on your own cluster, with no hosted control plane.

Verdict

Apache-2.0 sandbox orchestrator for Kubernetes when agent runtimes need stable, warm, stateful pods — pair it with gVisor or Kata for the actual isolation.

Embed

Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.

Markdown

[![Reviewed on Stack Gems](https://stackgems.com/badge/agent-sandbox.svg)](https://stackgems.com/gems/agent-sandbox)

HTML

<a href="https://stackgems.com/gems/agent-sandbox"><img src="https://stackgems.com/badge/agent-sandbox.svg" alt="Agent Sandbox reviewed on Stack Gems" height="20"></a>

AI Agents →

Related