Search Results for "sandbox"

A Rust client for Kubernetes in the style of a more generic client-go, a runtime abstraction inspired by controller-runtime, and a derive macro for CRDs inspired by kubebuilder. Hosted by CNCF as a Sandbox Project. These crates build upon Kubernetes API machinery + API concepts to enable generic abstractions. These abstractions allow Rust reinterpretations of reflectors, controllers, and custom resource interfaces so that you can write applications easily.

...The project provides a unified JSON configuration schema and a TypeScript SDK while supporting multiple containment backends. Its backends include process containers, Windows Sandbox, LXC, Bubblewrap, Seatbelt, microVM-based options, Hyperlight, IsolationSession, and WSL-related containment. MXC focuses on policy-driven isolation for filesystems, networking, process execution, and runtime behavior. It is especially useful for AI tool platforms, plugin ecosystems, agent runtimes, and developer products that need safer execution of generated or third-party code.