Thanks for the question. At a high level, vcluster and sandboxes can be used to create environments within k8s. The approach we take with sandboxes is different in that it optimizes these environments for testing in high fidelity and without having to deploy a full isolated copy of the entire application which doesn’t scale well. As I understand it, vcluster shines where isolation is important right down to the k8s control plane and networking, but one would still typically deploy every workload into a vcluster in order to realize a test environment. The scaling considerations that apply to deploying the entire application into a K8s namespace (or real cluster) would also carry over to the use of vcluster.