generated from coulomb/repo-seed
tegwick
c0a9261cdc
Add profile.sandbox-canary, HostSnapshot/inventory/stale schemas, SSH collectors, before/after provision deltas, telemetry export to State Hub and local JSON, default `sandboxer create` self-deploy, inspect/reap-stale CLI, runbook, and CoulombCore verification (26 tests pass).
32 lines
547 B
YAML
32 lines
547 B
YAML
id: profile.sandbox-canary
|
|
version: "1.0.0"
|
|
extension: ext.compose-ssh
|
|
isolation:
|
|
level: container
|
|
network:
|
|
default: deny
|
|
egress: []
|
|
workspace:
|
|
mode: remote-canonical
|
|
access: rw
|
|
scope_default: session
|
|
ttl:
|
|
default: 1h
|
|
max: 4h
|
|
idle_reap: null
|
|
resources:
|
|
cpu: null
|
|
memory_mb: null
|
|
setup:
|
|
instructions: ""
|
|
secret_refs: []
|
|
placement:
|
|
prefer: [sandboxer01]
|
|
fallback: [coulombcore]
|
|
reachability:
|
|
tunnel: ops-bridge
|
|
identity: ops-warden
|
|
metadata:
|
|
cost_class: self-hosted
|
|
latency_class: standard
|
|
observability: canary |