🚀 Announcing Agent Sandbox v1.0.3!

We're excited to announce the release of Agent Sandbox v1.0.3! This release introduces configurable TLS controls for the controller and router, resolves process group leaks in sandboxd, optimizes namespace deletion handling, enhances Python SDK type safety with PEP 561 support, extended pluggable agent toolsets & in-cluster Agent Client Protocol (ACP) server, and brings extensive new blueprints for enterprise fleet management, execution-scoped credentials, and advanced network policies.

Key Highlights

Core Controller & Runtime Stability

Process Group Cleanup in sandboxd (#1379): Replaced default process cancellation with process group termination (-PGID), preventing orphan descendant processes from leaking when clients disconnect from commands executed in sandboxes.
Namespace Deletion Requeue Optimization (#1617): Improved Sandbox controller reconciliation during namespace termination by intercepting NamespaceTerminatingCause errors and requeuing without logging errors or triggering exponential backoff storms during bulk deletions.
Configurable TLS Profiles (#1595): Added CLI flags, environment variables, and configuration options (--tls-min-version, --tls-cipher-suites, --metrics-secure-serving, and --metrics-cert-dir) to customize TLS versions and cipher suites for the controller metrics server and sandbox-router.

Python SDK & Client Tooling

Comprehensive Type Annotations (#794): Added strict typing annotations across the k8s-agent-sandbox client package, bundled the PEP 561 py.typed marker, and improved null-safety and error handling across async connectors and snapshot utilities.

Enterprise Blueprints & Reference Architectures

OpenClaw Enterprise Fleet Blueprint (#1652, #1656): Added openclaw-fleet-gke, an enterprise-grade reference architecture demonstrating warm-pool provisioning, per-employee persistent Filestore storage, out-of-band config injection, online dynamic PVC expansion, and Gateway API routing.
Execution-Scoped Credentials (#1644): Added examples/containarium-execution-scoped-token demonstrating short-lived, per-execution credential injection via ProcessConfig.env_vars with instant revocation upon process exit and network isolation via Cilium NetworkPolicy.
Cluster-Wide Egress Control (#1646): Added examples/network-policy-api-sandbox, showcasing multi-tier egress management and domain name filtering using the SIG Network ClusterNetworkPolicy API with kube-network-policies.
Pluggable Agent Toolsets & In-Cluster ACP Server (#1457, #1586): Extended sandboxed-tools with modular toolsets (including Gemini CLI parity in Go) and an in-cluster Agent Client Protocol (ACP) JSON-RPC server with client permission prompts.

Testing, Scalability & Operations

Scalability & CI Test Hardening (#1624, #1626, #1623, #1546, #1551): Enhanced scalability test presubmits with JUnit XML metric-gate outputs, startup readiness polling, retry loops for cluster provisioning, and refined flake classification to prevent false-alarm infra failures.
Example Test Coverage (#1608): Added unit test suites covering security-critical logic, path traversal guards, allowlists, and mutating webhook JSON patch generators across example workloads.
Performance Tuning & Lifecycle Guidance (#1359, #1587): Published a performance tuning guide for high-throughput deployments (docs/performance-tuning.md), clarified restartPolicy interactions with sandbox TTL cleanups, and updated controller metrics references with auto-generation tooling (#1444).

Installation

Standard Install (Core + Extensions)

Recommended for most users and GitOps engines (Argo CD, Config Sync, kustomize):

kubectl apply -f https://github.com/kubernetes-sigs/agent-sandbox/releases/download/v1.0.3/sandbox-with-extensions.yaml

Selective Install

Install components separately:

# Core only:
kubectl apply -f https://github.com/kubernetes-sigs/agent-sandbox/releases/download/v1.0.3/sandbox.yaml

# Extensions (opt-in):
kubectl apply -f https://github.com/kubernetes-sigs/agent-sandbox/releases/download/v1.0.3/extensions.yaml

Python SDK

pip install k8s-agent-sandbox==1.0.3

Contributors

We extend our sincere thanks to all contributors to this release:
@aditya-shantanu, @alexatakvelon, @aojea, @app/dependabot, @dongjiang1989, @esposem, @hsinhoyeh, @janetkuo, @justinsb, @lunarwhite, @sanjay7178, @vvoronko

New Contributors

@sanjay7178 made their first contribution in #794
@aojea made their first contribution in #1646

Full Changelog: v1.0.2...v1.0.3

kubernetes-sigs/agent-sandbox v1.0.3 on GitHub