The Multi-Tenancy Spectrum 2026: From Team Isolation to Agent Sandboxing


Not all multi-tenancy is created equal. From namespace-based isolation to virtual clusters to fully separate clusters, there’s a spectrum of approaches — each with different trade-offs in security, complexity, and operational overhead. In this session, you’ll explore the current landscape of Kubernetes multi-tenancy options, compare tools like vCluster, Capsule, Kamaji, kcp, and k3k, and learn how to choose the right isolation model for your specific use case.
We’ll also explore a trend reshaping how we think about tenants: the rise of AI agent sandboxing. As LLM-powered tools gain system access, a new class of ephemeral, disposable environments is emerging — raising the question: is agent isolation just multitenancy with a different tenant profile?
