Kubernetes Agent Sandbox CRD Launches (March 20): SandboxWarmPool Eliminates Cold Starts, gVisor/Kata Runtime Isolation, Scale-to-Zero with Resume

Kubernetes Blog·high signal

SIG Apps published the Agent Sandbox custom resource for Kubernetes on March 20, providing a declarative API for isolated, stateful, singleton agent workloads. SandboxWarmPool pre-provisions pods to eliminate cold starts — issue a SandboxClaim against a SandboxTemplate and get a pre-warmed, isolated environment immediately. Each Sandbox gets a stable hostname and network identity for agent-to-agent discovery, with native gVisor and Kata Containers support for kernel-level multi-tenant isolation.