Search Results for "sandbox"

A Rust client for Kubernetes in the style of a more generic client-go, a runtime abstraction inspired by controller-runtime, and a derive macro for CRDs inspired by kubebuilder. Hosted by CNCF as a Sandbox Project. These crates build upon Kubernetes API machinery + API concepts to enable generic abstractions. These abstractions allow Rust reinterpretations of reflectors, controllers, and custom resource interfaces so that you can write applications easily.

...The project provides a unified JSON configuration schema and a TypeScript SDK while supporting multiple containment backends. Its backends include process containers, Windows Sandbox, LXC, Bubblewrap, Seatbelt, microVM-based options, Hyperlight, IsolationSession, and WSL-related containment. MXC focuses on policy-driven isolation for filesystems, networking, process execution, and runtime behavior. It is especially useful for AI tool platforms, plugin ecosystems, agent runtimes, and developer products that need safer execution of generated or third-party code.

If you miss the good old days of SDN, then Kube-OVN is your choice in Cloud Native era. Kube-OVN, a CNCF Sandbox Level Project, integrates the OVN-based Network Virtualization with Kubernetes. It offers an advanced Container Network Fabric for Enterprises with the most functions, extreme performance and the easiest operation. Each Namespace can have a unique Subnet (backed by a Logical Switch). Pods within the Namespace will have IP addresses allocated from the Subnet.

OpenYurt is built based on upstream Kubernetes and is now hosted by the Cloud Native Computing Foundation(CNCF) as a Sandbox Level Project. OpenYurt has been designed to meet various DevOps requirements against typical edge infrastructures. It provides a consistent user experience for managing the edge applications as if they were running in the cloud infrastructure. It addresses specific challenges for cloud-edge orchestration in Kubernetes such as unreliable or disconnected cloud-edge networking, edge autonomy, edge device management, region-aware deployment, and so on. ...

Kuma is a modern Envoy-based service mesh that can run on every cloud, in a single or multi-zone capacity, across both Kubernetes and VMs. Thanks to its broad universal workload support, combined with native support for Envoy as its data plane proxy technology (but with no Envoy expertise required), Kuma provides modern L4-L7 service connectivity, discovery, security, observability, routing, and more across any service on any platform, databases included. Easy to use, with built-in service...