OpenShell Kubernetes Operator Brings Declarative Control to Sandboxes
I built the OpenShell Kubernetes Operator to manage OpenShell sandboxes using standard kubectl commands instead of direct gateway calls. This tool translates desired state into gateway actions while mirroring status back to Kubernetes resources. It supports secure credential handling via Secrets, reusable policies, and cluster-scoped workspaces, all while relying on the Agent Sandbox infrastructure for pod provisioning.
The operator is a thin front-end over the OpenShell gateway's gRPC API, reconciling custom resources into gateway calls without reimplementing the gateway itself.