AI Analytics with agent-sandbox
This guide describes how to build Docker image that defines analytics tool for an ADK agent, push the Docker image to a Artifact Registry repository and deploy the pushed image.
Aider in Agent Sandbox
This guide documents the complete setup and deployment of Aider inside an Agent Sandbox with any public GH repository.
All-in-One (AIO) Sandbox Example
This guide demonstrates how to create and access an All-in-One (AIO) Sandbox via Agent-Sandbox, featuring multiple pre-installed tools including VNC, VSCode, Jupyter, and Terminal in one unified environment.
Chrome in a Sandbox
This example runs Chrome in an isolated environment using Kubernetes-managed Sandboxes.
Coding Agent on Agent-Sandbox and LangGraph
This guide documents the complete setup and deployment of a coding agent that runs locally on Kubernetes using Kind (Kubernetes in Docker) with the agent-sandbox controller. The agent uses locally-cached transformer models to generate and execute Python code with automatic error correction.
Composing Sandbox with Network Policies
This example demonstrates how to compose a Sandbox with NetworkPolicy, Ingress and Service using KRO (Kubernetes Resource Orchestrator).
This guide documents the complete setup Sandbox with Network Policies that runs locally on Kubernetes using Kind (Kubernetes in Docker) with the agent-sandbox controller.
Firecracker Sandbox
This example demonstrates how to run an Agent Sandbox on top of Kata Containers with the Firecracker VMM, providing microVM isolation with fast boot times.
Python Runtime Sandbox for Gemini Computer Use Agent
This example implements a Python server in a sandbox container that can run the computer-use-preview agent.
gVisor
This guide shows how to run Agent Sandbox with the gVisor runtime using kind as a cluster.
Hello World on Kubernetes Sandbox
A simple Hello World sandbox example that demonstrates building a Docker image, pushing to Artifact Registry, and deploying to Kubernetes.
Isolated ML Workspaces with Agent-Sandbox
JupyterLab on Agent-Sandbox
Deploy single-user JupyterLab environments using Kubernetes agent-sandbox.
Enabling Kata Containers on GKE
This example demonstrates how to run sandboxed agents with Kata Containers providing hardware-virtualized isolation on GKE.
Kata Containers
This guide shows how to run Agent Sandbox with the Kata Containers runtime using minikube as a cluster.
Manual PodDisruptionBudget (PDB) Configuration
This guide demonstrates how to protect Sandboxes from voluntary disruptions (e.g., node drains, cluster upgrades) using standard Kubernetes PodDisruptionBudget manifests, without relying on the controller’s automated disruption control.
Nullclaw Sandbox Example
This example demonstrates how to run Nullclaw, a minimal AI assistant runtime built with Zig, inside the Agent Sandbox.
Protecting Agentic Sandboxes with OPA Gatekeeper
This guide provides step-by-step instructions for configuring OPA Gatekeeper security policy to prevent granting permissions to ServiceAccounts used by Sandboxes.
OpenClaw Sandbox Example
This example demonstrates how to run OpenClaw inside the Agent Sandbox with gVisor isolation and persistent storage.
Playwright Sandbox Example
This example demonstrates how to run Playwright with Chromium inside an isolated sandbox for web scraping and screenshots.
Python Runtime Sandbox
This example implements a Python FastAPI server in a sandbox container that can execute commands.
Sandbox with Kubernetes Service Account
Examples of a sandbox with a service account, namespace, and a basic sandbox configuration.
Using Agent Sandbox as a Tool in Agent Development Kit (ADK)
This guide walks you through the process of creating a simple ADK agent that uses Agent Sandbox as a tool to execute Python code in a secure sandboxed environment.
Secure Sandbox Admission Policy (VAP)
This policy enforces secure-by-default posture for all sandbox workloads using Kubernetes Validating Admission Policy.
VSCode Sandbox
This example demonstrates running VSCode in Agent Sandbox with optional hardening using gVisor or Kata Containers.
Windows Sandbox Example
This example demonstrates how to run a Windows guest inside the Agent Sandbox via KVM/QEMU using the dockurr/windows container image.