From zero to agent builder: Running kagent on your laptop
The author walks through running kagent, a CNCF Sandbox project, on a local kind cluster with a local Ollama model. An agent-builder agent is defined as a Kubernetes Agent resource that can only apply Agent manifests, with a three-tool allowlist and human approval before each apply. The post notes that security settings such as default unsecure auth and a built-in PostgreSQL password are deliberately left out of this laptop setup.
What changes for platform teams
A platform team evaluating agents-as-resources can see how RBAC limited to agents.kagent.dev, a tool allowlist and requireApproval gate constrain what a generated agent can do. The post states the laptop setup is not suitable for a shared cluster without the security settings it omits.
Read the original at CNCF Blog ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules