As AI agents increasingly evolve from simple chatbots to autonomous systems capable of generating and executing code and manipulating data, they introduce significant security and operational challenges. This talk explores Agent Sandbox, a Kubernetes-native solution designed to safely and efficiently run non-deterministic and untrusted workloads.

We will discuss how Agent Sandbox bridges the gap between the safety of virtual machines and the speed of containers. You will learn how it utilizes a dedicated CRD to manage templates and allow Agents to run generated code in an isolated container, leveraging gVisor to provide a user-space kernel runtime.

Join us to discover how to scale your AI agents confidently, knowing that even if they go rogue, your cluster remains secure.

Historically, optimizing resource allocation for Kubernetes workloads was a painful trial-and-error process, forcing developers to choose between high startup costs or lengthy delays. This constant struggle to find the "just right" balance for pod resources diverted valuable time from feature development.

But with In-Place Pod Resize (IPPR) in Kubernetes, those days are over. IPPR streamlines resource management by allowing you to dynamically resize pods without a restart, opening the door to true right-sizing and vastly improved bin packing.

This talk will explore the benefits of IPPR, demonstrate how to leverage it for optimal resource allocation, and show how it integrates with Vertical Pod Autoscaler (VPA) to provide startup boosts for your applications.