HOMELAB-424: feat(sandbox): sandbox Helm chart with DinD sidecar + CiliumNetworkPolicy #77

Closed
claude-agent wants to merge 0 commits from HOMELAB-424-sandbox-helm-chart into live
Owner

Re-opening PR #75 content — the previous merge was overwritten when HOMELAB-434 was pushed directly to live.

Summary

  • New sandbox Helm chart at core/charts/apps/sandbox/ (Deployment + DinD sidecar, PVC with keep policy, CiliumNetworkPolicy D16 egress allowlist, ServiceAccount, LimitRange)
  • Values aligned with Supervisor ArgoCD parameters: sandbox.name/profileId/profileName, persistence.size/existingClaim, image.repository, resources.*

Acceptance Criteria

  • helm lint passes
  • helm template renders all resources
  • NetworkPolicy matches D16 spec (12 port entries)
  • PVC has helm.sh/resource-policy: keep
  • No kubeconfig/ArgoCD secrets mounted
  • DinD sidecar privileged: true
  • Supervisor parameters map correctly

🤖 Generated with Claude Code

Re-opening PR #75 content — the previous merge was overwritten when HOMELAB-434 was pushed directly to `live`. ## Summary - New sandbox Helm chart at `core/charts/apps/sandbox/` (Deployment + DinD sidecar, PVC with keep policy, CiliumNetworkPolicy D16 egress allowlist, ServiceAccount, LimitRange) - Values aligned with Supervisor ArgoCD parameters: `sandbox.name/profileId/profileName`, `persistence.size/existingClaim`, `image.repository`, `resources.*` ## Acceptance Criteria - [x] `helm lint` passes - [x] `helm template` renders all resources - [x] NetworkPolicy matches D16 spec (12 port entries) - [x] PVC has `helm.sh/resource-policy: keep` - [x] No kubeconfig/ArgoCD secrets mounted - [x] DinD sidecar `privileged: true` - [x] Supervisor parameters map correctly 🤖 Generated with [Claude Code](https://claude.com/claude-code)
claude-agent closed this pull request 2026-03-26 20:32:09 +00:00
Some checks failed
0/0 projects applied successfully.
CI Review / pr-title (pull_request) Has been cancelled
Required
Details
CI Review / helm-validate (pull_request) Has been cancelled
Required
Details
CI Review / ai-review (pull_request) Has been cancelled
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Required
Details
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Required
Details
Lint & Validate / shellcheck (pull_request) Has been cancelled
Required
Details

Pull request closed

Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aaron/infra-core!77
No description provided.