| Element | Description |
|---|
| Overview | Organization health dashboard |
| Instances | Sandbox instance management (create, suspend, resume, delete) |
| Images | Toolbox image builder and manager |
| Global Settings | Org-level configuration (Sandbox Profiles, Secrets & API Keys, Environment Variables, Defaults) |
Overview Dashboard
At-a-glance view of organization health and sandbox status.
Health Cards
| Card | Description |
|---|
| Sandboxes | Count of running sandboxes |
| Toolboxes | Count of configured toolbox images |
| Volumesets | Count of persistent volumes |
| Secrets | Count of org secrets |
Sandbox Table
A full table of all sandboxes in the current GVC. Each row shows name, image, endpoint, readiness, size, and last modified date.
Sandbox Actions
| Action | Description |
|---|
| Connect | Open the connect panel |
| Open IDE | Launch the browser IDE |
| Open Terminal | Open a web terminal session |
| Open App | Navigate to the application endpoint |
| Suspend | Scale to zero while retaining the volumeset |
| Resume | Scale back to one and remount the volumeset |
| Delete | Delete the sandbox and its volumeset permanently |
Orphaned Volumesets
Volumesets no longer attached to a sandbox are surfaced with age badges. A one-click restore action spins up a new sandbox from an orphaned volumeset.
Instances
Create Sandbox
| Field | Required | Default | Description |
|---|
| Name | No | dev-{username} | Sandbox name |
| Image | Yes | org default | Toolbox image |
| Size Profile | Yes | Medium | CPU/memory preset |
| App Port | No | 8080 | Port your app listens on |
| Identity | No | org default | Infrastructure identity |
| Secrets | No | — | Secret-to-env-var mappings |
| Environment Variables | No | — | Key-value pairs exposed inside the sandbox |
Connect Panel
After selecting a sandbox, the connect panel displays IDE connection links, the IDE password, runtime diagnostics, and detected ports.
Images
| Column | Description |
|---|
| Image Name | Image reference |
| Runtimes | Configured language runtimes |
| Mode | Build mode used (Scratch, BYOI) |
| Created | Date the image was built |
Build Modes
- Scratch — select runtimes, packages, AI tools, and extensions interactively
- BYOI — provide an existing image. Dev tools are layered on top.
Build Modal
An animated modal tracks build progress through four phases: Creating, Building, Pushing, Done.
Image Actions
| Action | Description |
|---|
| Clone | Create a copy with a new name |
| Set Default | Set as the org default toolbox |
| Delete | Remove the toolbox and delete the image |
Settings
Organization-level configuration, accessible via the Global Settings submenu.
Sandbox Profiles
CPU and memory presets that appear in the sandbox create form.
| Field | Type | Description |
|---|
| Name | string | Profile display name |
| CPU | string | CPU allocation (e.g., 4) |
| Memory | string | Memory allocation (e.g., 16Gi) |
| Description | string | Human-readable description |
| Default | radio | Pre-selected profile in the create form |
Secrets & API Keys
Global secret mappings that bind a Control Plane secret to an environment variable name.
| Column | Description |
|---|
| CPLN Secret | Name of the Control Plane secret |
| Env Var Name | Environment variable exposed inside sandboxes |
Environment Variables
Default environment variables injected into every new sandbox.
| Field | Type | Description |
|---|
| Name | string | Variable name |
| Value | string | Variable value |
| Locked | toggle | Prevent developers from overriding |
| Description | string | Human-readable description |
Defaults
| Setting | Description |
|---|
| Default Toolbox | Toolbox image used when none is specified |
| Default Identity | Identity attached to new sandboxes |
| Identity Locked | Prevent developers from overriding the identity |
| Default IDE | IDE used when none is specified |
| IDE Locked | Prevent developers from overriding the IDE |
Locked settings are enforced only in the UI. Users with direct CPLN API access can still override these values.
