> ## Documentation Index
> Fetch the complete documentation index at: https://docs.controlplane.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Sandbox Web UI

> Reference for the Sandbox Manager web interface — dashboard, instances, images, and global settings.

## Sidebar Navigation

| Element         | Description                                                                                     |
| :-------------- | :---------------------------------------------------------------------------------------------- |
| Overview        | Organization health dashboard                                                                   |
| Instances       | Sandbox instance management (create, suspend, resume, delete)                                   |
| Images          | Toolbox image builder and manager                                                               |
| Global Settings | Org-level configuration (Sandbox Profiles, Secrets & API Keys, Environment Variables, Defaults) |

## Overview Dashboard

At-a-glance view of organization health and sandbox status.

### Health Cards

| Card       | Description                        |
| :--------- | :--------------------------------- |
| Sandboxes  | Count of running sandboxes         |
| Toolboxes  | Count of configured toolbox images |
| Volumesets | Count of persistent volumes        |
| Secrets    | Count of org secrets               |

### Sandbox Table

A full table of all sandboxes in the current GVC. Each row shows name, image, endpoint, readiness, size, and last modified date.

### Sandbox Actions

| Action        | Description                                      |
| :------------ | :----------------------------------------------- |
| Connect       | Open the connect panel                           |
| Open IDE      | Launch the browser IDE                           |
| Open Terminal | Open a web terminal session                      |
| Open App      | Navigate to the application endpoint             |
| Suspend       | Scale to zero while retaining the volumeset      |
| Resume        | Scale back to one and remount the volumeset      |
| Delete        | Delete the sandbox and its volumeset permanently |

### Orphaned Volumesets

Volumesets no longer attached to a sandbox are surfaced with age badges. A one-click restore action spins up a new sandbox from an orphaned volumeset.

## Instances

### Create Sandbox

| Field                 | Required | Default          | Description                                |
| :-------------------- | :------- | :--------------- | :----------------------------------------- |
| Name                  | No       | `dev-{username}` | Sandbox name                               |
| Image                 | Yes      | org default      | Toolbox image                              |
| Size Profile          | Yes      | Medium           | CPU/memory preset                          |
| App Port              | No       | `8080`           | Port your app listens on                   |
| Identity              | No       | org default      | Infrastructure identity                    |
| Secrets               | No       | —                | Secret-to-env-var mappings                 |
| Environment Variables | No       | —                | Key-value pairs exposed inside the sandbox |

### Connect Panel

After selecting a sandbox, the connect panel displays IDE connection links, the IDE password, runtime diagnostics, and detected ports.

## Images

### Toolbox List

| Column     | Description                     |
| :--------- | :------------------------------ |
| Image Name | Image reference                 |
| Runtimes   | Configured language runtimes    |
| Mode       | Build mode used (Scratch, BYOI) |
| Created    | Date the image was built        |

### Build Modes

* **Scratch** — select runtimes, packages, AI tools, and extensions interactively
* **BYOI** — provide an existing image. Dev tools are layered on top.

### Build Modal

An animated modal tracks build progress through four phases: Creating, Building, Pushing, Done.

### Image Actions

| Action      | Description                             |
| :---------- | :-------------------------------------- |
| Clone       | Create a copy with a new name           |
| Set Default | Set as the org default toolbox          |
| Delete      | Remove the toolbox and delete the image |

## Settings

Organization-level configuration, accessible via the **Global Settings** submenu.

### Sandbox Profiles

CPU and memory presets that appear in the sandbox create form.

| Field       | Type   | Description                             |
| :---------- | :----- | :-------------------------------------- |
| Name        | string | Profile display name                    |
| CPU         | string | CPU allocation (e.g., `4`)              |
| Memory      | string | Memory allocation (e.g., `16Gi`)        |
| Description | string | Human-readable description              |
| Default     | radio  | Pre-selected profile in the create form |

### Secrets & API Keys

Global secret mappings that bind a Control Plane [secret](/reference/secret) to an environment variable name.

| Column       | Description                                   |
| :----------- | :-------------------------------------------- |
| CPLN Secret  | Name of the Control Plane secret              |
| Env Var Name | Environment variable exposed inside sandboxes |

New secrets can be created inline from the settings page.

### Environment Variables

Default environment variables injected into every new sandbox.

| Field       | Type   | Description                        |
| :---------- | :----- | :--------------------------------- |
| Name        | string | Variable name                      |
| Value       | string | Variable value                     |
| Locked      | toggle | Prevent developers from overriding |
| Description | string | Human-readable description         |

### Defaults

| Setting          | Description                                               |
| :--------------- | :-------------------------------------------------------- |
| Default Toolbox  | Toolbox image used when none is specified                 |
| Default Identity | [Identity](/reference/identity) attached to new sandboxes |
| Identity Locked  | Prevent developers from overriding the identity           |
| Default IDE      | IDE used when none is specified                           |
| IDE Locked       | Prevent developers from overriding the IDE                |

<Warning>
  Locked settings are enforced only in the UI. Users with direct CPLN API access can still override these values.
</Warning>