1 link tagged with all of: sandboxing + microvm + kubernetes
Click any tag below to further narrow down your results
Links
Solo.io and Google teamed up to integrate Agent Substrate into kagent, enabling fast suspend/resume, scale-to-zero and secure sandboxing for AI agents on Kubernetes. It uses pre-provisioned worker pools, snapshots to storage, and lightweight isolation (gVisor or Firecracker) to cut boot times to milliseconds and minimize idle resource use.
- kagent now integrates Google's Agent Substrate to suspend/resume/scale-to-zero AI agents on Kubernetes in 50-200ms instead of the seconds pods normally take to boot
- It works by pre-provisioning worker pools and snapshotting idle agent states to object storage (S3/GCS), then restoring them on demand
- A parallel control layer handles deploy/suspend/resume logic instead of routing everything through the Kubernetes API, avoiding overload
- Each agent instance can be sandboxed with gVisor, Firecracker, or Bubblewrap/Landlock/seccomp, with Solo.io's agentgateway enforcing egress control and credential injection at the network edge