The agentic AI space faces challenges around secure, governed connectivity between agents, tools, large language models, and microservices. To address this, Solo.io developed two open-source projects: Kagent and Agentgateway. While Kagent, donated to the Cloud Native Computing Foundation, helps scale AI agents, it lacks a secure way to mediate communication between agents and tools. Enter Agentgateway, donated to the Linux Foundation, which provides governance, observability, and security for agent-to-agent and agent-to-tool traffic. Written in Rust, it supports protocols like MCP and A2A and integrates with Kubernetes Gateway API and inference gateways.
Lin Sun, Solo.io’s head of open source, explained that Agentgateway allows developers to control which tools agents can access—offering flexibility to expose only tested or approved tools. This enables fine-grained policy enforcement and resilience in agent communication, similar to how service meshes manage microservice traffic. Agentgateway ensures secure and selective tool exposure, supporting scalable and secure agent ecosystems. Major players like AWS and Microsoft are also engaging in its development.
Learn more from The New Stack about the latest in open source projects like Agentgateway:
Learn more from The New Stack about the latest in open source projects like Agentgateway:
Why Tech Giants Are Backing the New Agentgateway Project
AI Agents Are Creating a New Security Nightmare for Enterprises and Startups
Five Steps to Build AI Agents that Actually Deliver Business Results
Join our community of newsletter subscribers to stay on top of the news and at the top of your game.
What do you do next when you have over 150 patents to your name? Write a book, of course! Lin Sun is a Senior Technical Staff Member and Master Inventor at IBM, where she has spent the past 14 years doing software engineering in areas including cloud and open technologies. She has worked on the Istio service mesh since 2017, and is on the Istio steering and technical oversight committees. Lin joins Adam and Craig to discuss invention, making Istio easier to use, and how being a mother has impacted both.
Do you have something cool to share? Some questions? Let us know:
web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod
Chatter of the week Snow in Seattle
News of the week Tanka, from Grafana Hacker News commentary
Jsonnet
ksonnet archived
Configula, from Brendan Burns Caligula, from Rome
Falco moves to the CNCF incubator Falco's biggest hit, Rock Me Amadeus
CKAD is now valid for 3 years
Contour 1.1.0
Getting serious about open-source security by Dan Lorenc Episode 39, with Dan Lorenc
Designing and Building HA Kubernetes on Bare-Metal
AKS Latency and performance/availability issues due to IO saturation and throttling under load
Kubernetes Networking Demystified by Karen Bruner at StackRox
How to Give Developers Access to Kubernetes During Development by Daniel Thiry How to deal with computing resource cost for Kubernetes-based development
Key metrics for monitoring Istio from Datadog
Deploying multiple Istio Ingress Gateways by Peter Jausovec
Big Prometheus by Clay Smith from Monitoring Monitoring
Breaking Changes in Helm 3 (and How to Fix Them) by Jack Morris
Security advantages of pull-based CD pipelines by Alex Kaskasoli
Zero touch authentication on Kubernetes by Peter Wilcsinszky at BanzaiCloud
Vault replication across multiple datacenters on Kubernetes by Nandor Kracser
OpenStack's Complicated Kubernetes Relationship by Mike Vizard of ContainerJournal
Kubernetes 1.15 security changes in GKE
KubeCon + CloudNativeCon NA 2019 Transparency Report
Zendesk case study
Links from the interview IBM Master Inventor
Lin's patents
Her favorites: Analyzing email content to determine potential intended recipients
Ensuring a desired distribution of content in a multimedia document for different demographic groups utilizing demographic information
Istio announcement blog and GlueCon talk from 2017
Lin at the IBM Cloud CTO Office IBM Research
IBM Cloud, formerly known as Bluemix
Bluemix Service Proxy
Amalgam8
Envoy
Istio 1.1, the "9 months" release The Sidecar resource, which lets you scope which services are known by a given sidecar to reduce resource usage
Release cadence
Istio 1.4
Mutual TLS
New 1.4 features: Auto-mutual TLS
client-go library
istioctl analyze
Requirement to declare containerPort removed in 1.3, automatic protocol selection added
User Experience working group istioctl add-to-mesh
istioctl describe-pod
istioctl install
Steering committee
Technical oversight committee
istiod Istio as an Example of When Not to Do Microservices by Christian Posta
Minion cluster mode
Istio Explained, by Lin and Dan Berg
kui and iter8
Lin Sun on Twitter