CNCF: OpenKruise Agents v0.6.0: Leaping ahead in agent Sandbox security and automation
OpenKruise Agents v0.6.0 adds L4 and L7 egress control, MCP tool-level ACLs, and credential injection from Kubernetes Secrets, so API keys stay out of Sandbox workloads. It also adds SandboxUpdateOps with CheckpointRestore that preserves rootfs during upgrades, including paused Sandboxes, plus a PoolAutoscaler for warm pool capacity and automatic pause and resume. The release brings the CRD count from 6 to 12 and adds two new components, traffic-control-plane and traffic-proxy.
What changes for platform teams
Platform teams running agent sandboxes on Kubernetes get declarative egress allow lists, per-tool MCP call restrictions, and proxy-side credential handling, but these controls only cover gateway-routed traffic and should be combined with NetworkPolicy or cloud firewalls. Warm pool scaling and idle pause can reduce idle compute cost, though the throughput figures quoted are vendor-provided theoretical limits.
Read the original at CNCF Blog ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules