Xeonr Developer Docs
API SpecificationSandboxes

Watch Sandbox

POST
/containers.api.v1.SandboxService/WatchSandbox

Server stream of sandbox state changes, derived from the record and the live pod phase and polled about every 2 seconds. Emits only on change and ends once the sandbox is TERMINATED. Unimplemented without cluster access.

Access: namespace VIEWER or above (read)

Authorization

BearerAuth
AuthorizationBearer <token>

A namespace-scoped API key (cpk_…) for machines, or a Xeonr Auth OIDC token for humans. The key's namespace and role are pinned server-side.

In: header

Header Parameters

Connect-Protocol-Version?number

Define the version of the Connect protocol

Connect-Timeout-Ms?number

Define the timeout, in ms

Request Body

application/connect+json

sandboxId?string
Length1 <= length <= 64
[key: string]?never

Response Body

application/connect+json

application/connect+json

curl -X POST "https://containers.xeonr.io/containers.api.v1.SandboxService/WatchSandbox" \  -H "Connect-Protocol-Version: 1" \  -H "Connect-Timeout-Ms: 1000" \  -H "Content-Type: application/connect+json" \  -d ''
{
  "state": "SANDBOX_STATE_UNSPECIFIED",
  "atUnix": "string",
  "detail": "string"
}
{
  "code": "not_found",
  "message": "string",
  "details": [
    {
      "type": "string",
      "value": "string",
      "debug": {}
    }
  ]
}

Unexpose Sandbox Port POST

Drops a port from the sandbox's preview exposures. Metadata only: already-issued tokens stop working when they expire. A port that is not exposed is a no-op. Unimplemented when no preview domain is configured. **Access:** namespace OPERATOR or above (write)

containers.api.v1.TeamSettingsService

TeamSettingsService holds a team's container-platform preferences. Teams themselves live in Xeonr Auth; this is only what the platform remembers about one.