Add block_network to Sandboxes
Merged
CO
1y ago+994+994+012345678901234567890123456789-872-872-012345678901234567890123456789
Setting block_network to True blocks all outbound network traffic from a Sandbox excluding from exposed ports
Summary by cubic
Added a block_network option to Sandboxes/Pods to block all outbound network traffic while still allowing inbound connections to exposed ports. The flag is wired through the API, SDK, and worker to enforce at runtime.
-
New Features
- New boolean flag: blockNetwork (OpenAPI) / block_network (gRPC, backend, SDK).
- Worker applies IPv4/IPv6 iptables rules to drop outbound traffic from containers.
- Pod/Sandbox constructors and stub creation now accept and propagate block_network.
-
Refactors
- Added Worker.runtime to types/OpenAPI and updated generated SDK/proto field numbers accordingly.