Refacto Agents

Industry story

Google open-sources k8s-aibom for automated AI bills of materials on Kubernetes

ai-ops cloud-costs governance orchestration

Shadow AI is the governance problem nobody has a clean answer to — employees spinning up models and agents outside IT's view, and no one knowing what's actually running in production. Google's answer is k8s-aibom, an open-source Kubernetes controller that continuously scans cluster environments and auto-generates standardized ML Bills of Materials. The bet is that if you can inventory what's running, you can govern it. Watch whether enterprise security teams adopt this or whether it just becomes one more tool that lives in a repo and never gets deployed.

Full analysis

Google Cloud is open-sourcing k8s-aibom, a Kubernetes controller (an automated management component for containerized workloads) that continuously monitors cluster environments to detect AI runtimes and automatically generate standardized ML Bills of Materials (ML-BOMs). A Bill of Materials in this context is an inventory of AI models and components running in an environment — analogous to a software bill of materials (SBOM). The tool addresses the governance gap created by employees deploying unauthorized AI agents and models outside IT oversight, which Google flags as a shadow-AI risk.

Comments