Running Agentic Workloads on Kubernetes: Network Policies, Resource Quotas, and the Security Model You Need

Agentic AI workloads have a threat surface that standard Kubernetes security models weren't designed for: wide egress requirements, dynamic tool invocation, and the potential for autonomous actions that cross trust boundaries. Here is the security architecture — network policies, RBAC, resource quotas, and audit logging — that actually contains them.