diff --git a/sandbox/sdk/python/reference.mdx b/sandbox/sdk/python/reference.mdx index 28dd277..cda0674 100644 --- a/sandbox/sdk/python/reference.mdx +++ b/sandbox/sdk/python/reference.mdx @@ -60,6 +60,7 @@ Arguments: | `tags` | `dict[str, str] \| None` | Key-value labels for finding related sandboxes. | | `volume_mounts` | `dict[str, str] \| None` | Volume IDs keyed by absolute mount path inside the sandbox. | | `networking` | `list[SandboxNetworkingSpec] \| None` | Port to expose and, optionally, the domain and visibility to serve it on. Omit to expose nothing. See [Sandbox Networking](/sandboxes/networking). | +| `egress` | `SandboxEgressSpec \| None` | Restricts the sandbox's outbound traffic to a list of allowed destinations (hostnames, wildcards, IP literals, CIDR ranges, or in-cluster Service DNS names). Omit to leave internet access unrestricted. See [Restrict egress with an allowlist](/sandboxes/networking#restrict-egress-with-an-allowlist). | | `ttl_seconds` | `int \| None` | Maximum lifetime in seconds, counted from creation. The sandbox is terminated once it elapses. Omit for no limit. See [sandbox lifetime](/sandboxes/overview#sandbox-lifetime). | Returns a `Sandbox` handle. diff --git a/sandbox/sdk/typescript/reference.mdx b/sandbox/sdk/typescript/reference.mdx index c9e5a62..dff0c72 100644 --- a/sandbox/sdk/typescript/reference.mdx +++ b/sandbox/sdk/typescript/reference.mdx @@ -64,6 +64,7 @@ Options: | `tags` | `Record \| undefined` | Key-value labels for finding related sandboxes. | | `volume_mounts` | `Record \| undefined` | Volume IDs keyed by absolute mount path inside the sandbox. | | `networking` | `SandboxNetworkingSpec[] \| undefined` | Port to expose and, optionally, the domain and visibility to serve it on. Omit to expose nothing. See [Sandbox Networking](/sandboxes/networking). | +| `egress` | `SandboxEgressSpec \| undefined` | Restricts the sandbox's outbound traffic to a list of allowed destinations (hostnames, wildcards, IP literals, CIDR ranges, or in-cluster Service DNS names). Omit to leave internet access unrestricted. See [Restrict egress with an allowlist](/sandboxes/networking#restrict-egress-with-an-allowlist). | | `ttl_seconds` | `number \| undefined` | Maximum lifetime in seconds, counted from creation. The sandbox is terminated once it elapses. Omit for no limit. See [sandbox lifetime](/sandboxes/overview#sandbox-lifetime). | Returns a `Sandbox` handle. diff --git a/sandboxes/networking.mdx b/sandboxes/networking.mdx index 146ef82..bc30a17 100644 --- a/sandboxes/networking.mdx +++ b/sandboxes/networking.mdx @@ -28,7 +28,7 @@ Sandboxes run untrusted code, so their outbound traffic is isolated by default, | ----------- | --------- | | Public internet | Yes | | Cluster DNS | Yes | -| In-cluster services and other pods (including other sandboxes) | No | +| In-cluster services and other pods (including other sandboxes) | No (unless allowlisted, see below) | | Kubernetes API server and the sandbox control plane | No | | Cloud metadata endpoint (`169.254.169.254`) | No | | Private address space (`10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`, `169.254.0.0/16`, `100.64.0.0/10`) | No |