e0e362d700
SDK Tests / changes (push) Successful in 2m29s
Real E2E Tests / changes (push) Successful in 2m29s
Deploy Docs Pages / build (push) Has been cancelled
Deploy Docs Pages / deploy (push) Has been cancelled
Real E2E Tests / JavaScript E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / Python E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / Java E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / C# E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / Go E2E (docker bridge) (push) Has been cancelled
Real E2E Tests / Real E2E CI (push) Has been cancelled
SDK Tests / SDK CI (push) Has been cancelled
SDK Tests / CLI Tests (push) Has been cancelled
SDK Tests / Python SDK Quality (code-interpreter) (push) Has been cancelled
SDK Tests / Python SDK Quality (sandbox) (push) Has been cancelled
SDK Tests / Python SDK Tests (code-interpreter) (push) Has been cancelled
SDK Tests / JavaScript SDK Quality And Tests (code-interpreter) (push) Has been cancelled
SDK Tests / JavaScript SDK Quality And Tests (sandbox) (push) Has been cancelled
SDK Tests / Python SDK Tests (sandbox) (push) Has been cancelled
SDK Tests / CLI Quality (push) Has been cancelled
SDK Tests / Kotlin SDK Quality And Tests (sandbox) (push) Has been cancelled
SDK Tests / Kotlin SDK Quality And Tests (code-interpreter) (push) Has been cancelled
SDK Tests / C# SDK Quality And Tests (code-interpreter) (push) Has been cancelled
SDK Tests / C# SDK Quality And Tests (sandbox) (push) Has been cancelled
SDK Tests / Go SDK Quality And Tests (push) Has been cancelled
34 lines
1.6 KiB
Python
34 lines
1.6 KiB
Python
# Copyright 2026 Alibaba Group Holding Ltd.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
"""Well-known CreateSandboxRequest.extensions keys and workload storage keys."""
|
|
|
|
# access.renew.extend.seconds extension key (annotation-based)
|
|
ACCESS_RENEW_EXTEND_SECONDS_KEY = "access.renew.extend.seconds"
|
|
ACCESS_RENEW_EXTEND_SECONDS_METADATA_KEY = "opensandbox.io/access-renew-extend-seconds"
|
|
|
|
# bootstrap.execd.isolation extension key
|
|
# When set to "enable", the sandbox container receives CAP_SYS_ADMIN so that
|
|
# execd can use bwrap namespace isolation (OSEP-0013).
|
|
BOOTSTRAP_EXECD_ISOLATION_KEY = "bootstrap.execd.isolation"
|
|
|
|
# Default mount path for the isolation upper directory.
|
|
# Must match the execd DefaultConfig().UpperRoot value.
|
|
ISOLATION_UPPER_MOUNT_PATH = "/var/lib/execd/isolation"
|
|
|
|
# Extensions to annotations transformation prefix
|
|
# User-specified extension keys starting with EXTENSIONS_ANNOTATION_PREFIX
|
|
# are automatically propagated to Pod annotations with ANNOTATION_METADATA_PREFIX
|
|
EXTENSIONS_ANNOTATION_PREFIX = "opensandbox.extensions."
|
|
ANNOTATION_METADATA_PREFIX = "opensandbox.io/extensions." |