Components
K8E bundles a production-grade, CNCF-conformant Kubernetes distribution with everything needed for secure agent sandboxing.
Component Table
| Component | Version | Purpose |
|---|---|---|
| â¸ī¸ Kubernetes | v1.37.x | Core orchestration engine |
| đˇ Cilium | Latest | eBPF networking & per-session egress policy |
| đĻ Containerd | v1.7.x | Container runtime |
| đī¸ Tandem (rqlite) | â | etcd v3 compatibility layer over rqlite â the sole datastore backend (KIP-29) |
| đ CoreDNS | v1.11.x | Cluster DNS |
| â Helm Controller | v0.16.x | GitOps & chart management |
| đ Metrics Server | v0.7.x | Resource metrics |
| đž Local Path Provisioner | v0.0.30 | Persistent storage (sandbox workspace PVCs) |
| đ cert-manager | v1.21.2 | Bundled by default; lifecycle and opt-out documented |
| đĄī¸ gVisor / Kata / Firecracker | â | Pluggable sandbox isolation runtimes |
| đ¤ Sandbox CLI | standalone | k8e-sandbox-cli â agent tool commands |
Deep Dive
- Architecture â how the components fit together
- Sandbox Runtime Setup â choosing and installing isolation runtimes
- Sandbox CLI â the agent tool interface