- Published on
- 9 min read
AI Tool Gateways: Sandboxing Agent Access in Kubernetes
AI agents have unlimited ambition and undefined access boundaries. You have sandboxed everything else. Here is how to sandbox your agents too.
7 posts tagged
AI agents have unlimited ambition and undefined access boundaries. You have sandboxed everything else. Here is how to sandbox your agents too.
Network policies in most Kubernetes clusters are cargo cult. Teams write them, Kubernetes accepts them, and nothing changes. Cilium actually enforces them — and shows you the traffic.
Why 48GB changes a Mac from coding laptop into an AI workstation for local models, parallel agents, and platform engineering.
A practical GPG commit signing setup on macOS, with GitHub verification, pinentry-mac, GPG_TTY, and the parts that usually break.
A clean SSH commit signing setup on macOS, with separate auth and signing keys, local verification, and none of the usual GPG hassle.
Authentication gets easier when you separate login, delegated access, SSO, and workload identity. This guide shows where each one fits.
Run workloads on GKE and access AWS without static keys. This guide shows how to federate a Kubernetes service account into an AWS IAM role.