Русский

English

Русский

English

Тема

POST /sandboxes ​

Create sandbox

Create a sandbox from the template

Тело запроса ​

Обязательно: да

application/json ​

Схема: NewSandbox

  • templateID · string · обязательно

    Identifier of the required template

  • timeout · integer · необязательно

    Time to live for the sandbox in seconds.

    Формат: int32

    По умолчанию: 15

    Минимум: 0

  • autoPause · boolean · необязательно

    Automatically pauses the sandbox after the timeout

    По умолчанию: false

  • autoPauseMemory · boolean · необязательно

    Controls the snapshot kind taken when the sandbox auto-pauses on timeout (only relevant when autoPause is true). When false, the auto-pause drops the in-memory state and persists only the filesystem (a filesystem-only snapshot); resuming it cold-boots (reboots) the sandbox from disk. Such a snapshot cannot be auto-resumed by traffic and must be resumed explicitly, so it cannot be combined with autoResume. Defaults to true (full memory snapshot).

    По умолчанию: true

  • autoResume · SandboxAutoResumeConfig · необязательно

    Auto-resume configuration for paused sandboxes.

  • autoResume.enabled · SandboxAutoResumeEnabled · обязательно

    Auto-resume enabled flag for paused sandboxes. Default false.

    По умолчанию: false

  • secure · boolean · необязательно

    Secure all system communication with sandbox

  • allow_internet_access · boolean · необязательно

    Allow sandbox to access the internet. When set to false, it behaves the same as specifying denyOut to 0.0.0.0/0 in the network config.

  • network · SandboxNetworkConfig · необязательно

  • network.allowPublicTraffic · boolean · необязательно

    Specify if the sandbox URLs should be accessible only with authentication.

    По умолчанию: true

  • network.allowOut · array<string> · необязательно

    List of allowed destinations for egress traffic. Each entry can be a CIDR block (e.g. "8.8.8.8/32"), a bare IP address (e.g. "8.8.8.8"), or a domain name (e.g. "example.com", "*.example.com"). Allowed entries always take precedence over denied entries.

  • network.denyOut · array<string> · необязательно

    List of denied CIDR blocks or IP addresses for egress traffic. Domain names are not supported for deny rules.

  • network.maskRequestHost · string · необязательно

    Specify host mask which will be used for all sandbox requests

  • network.rules · object · необязательно

    Per-domain transform rules applied to matching egress HTTP/HTTPS requests. Keys are domains (e.g. "api.example.com", "example.com"). A domain listed here is not automatically allowed - use allowOut to permit the traffic.

  • network.rules.* · array<SandboxNetworkRule> · additional property

  • network.rules.*.transform · SandboxNetworkTransform · необязательно

    Transformations applied to matching egress requests before forwarding.

  • network.rules.*.transform.headers · object · необязательно

    HTTP headers to inject or override in matching requests. An existing header with the same name is replaced. Values are plain strings; secret resolution happens client-side before sending to the API.

  • network.rules.*.transform.headers.* · string · additional property

  • metadata · SandboxMetadata · необязательно

  • metadata.* · string · additional property

    Metadata of the sandbox

  • envVars · EnvVars · необязательно

  • envVars.* · string · additional property

    Environment variables for the sandbox

  • iam · SandboxIam · необязательно

    Sandbox workload identity configuration. A non-empty, valid tokens map enables workload identity for the sandbox.

  • iam.tokens · SandboxIamTokens · необязательно

    Named workload-token definitions, keyed by a caller-chosen token name.

  • iam.tokens.* · SandboxIamToken · additional property

  • iam.tokens.*.audience · string · обязательно

    Audience of the workload token, stored exactly as provided.

  • iam.tokens.*.tokenType · string · обязательно

    Workload token type.

Ответы ​

201 ​

The sandbox was created successfully

Content-Type: application/json

Схема: Sandbox

  • templateID · string · обязательно

    Identifier of the template from which is the sandbox created

  • sandboxID · string · обязательно

    Identifier of the sandbox

  • alias · string · необязательно

    Alias of the template

  • envdVersion · EnvdVersion · обязательно

    Version of the envd running in the sandbox

  • domain · string | null · необязательно

    Base domain where the sandbox traffic is accessible

401 ​

Authentication error

Content-Type: application/json

Схема: Error

  • code · integer · обязательно

    Error code

    Формат: int32

  • message · string · обязательно

    Error

400 ​

Bad request

Content-Type: application/json

Схема: Error

  • code · integer · обязательно

    Error code

    Формат: int32

  • message · string · обязательно

    Error

500 ​

Server error

Content-Type: application/json

Схема: Error

  • code · integer · обязательно

    Error code

    Формат: int32

  • message · string · обязательно

    Error