Environment Variables¶

Agent-Sandbox is configured via environment variables using envconfig. This page documents all available configuration options.

Server Configuration¶

SERVER_ADDR¶

Server listen address.

• Default: 0.0.0.0:10000
• Example: 0.0.0.0:8080

API_BASE_URL¶

Computed as /api/{API_VERSION}. Not normally overridden.

• Default: /api/v1

Authentication¶

SYSTEM_TOKEN¶

System administrator token with full access to all resources.

• Default: sys-2492a85b10ed4cb083b2c76b181eac96
• Example: sys-your-custom-admin-token

API_TOKENS_RAW¶

Comma-separated list of additional API tokens. The SYSTEM_TOKEN is automatically prepended.

• Default: testuser-aef134ef-7aa1-945e-9399-7df9a4ad0c3f
• Example: user1-abc123,user2-def456,user3-ghi789
• Note: Tokens must be at least 5 characters long.

Tokens are parsed and validated at startup. Invalid or empty tokens are ignored.

Kubernetes Configuration¶

SANDBOX_NAMESPACE¶

Kubernetes namespace where sandbox pods and ReplicaSets are created.

• Default: default
• Example: agent-sandbox

CONFIGMAP_NAME¶

Name of the ConfigMap used to store templates and sandbox template configuration.

• Default: agent-sandbox
• Example: my-sandbox-config

ENV_NAME¶

Environment name label for deployment identification.

• Default: dev
• Example: production, staging

Sandbox Defaults¶

SANDBOX_DEFAULT_IMAGE¶

Default container image used when creating sandboxes without specifying a template.

• Default: ghcr.io/agent-infra/sandbox:latest
• Example: myregistry/my-sandbox:v1.0.0

SANDBOX_DEFAULT_TEMPLATE¶

Default template name used when not specified.

• Default: aio
• Example: code-interpreter

Example Configuration¶

Kubernetes Deployment¶

apiVersion: apps/v1
kind: Deployment
metadata:
  name: agent-sandbox
  namespace: agent-sandbox
spec:
  template:
    spec:
      containers:
      - name: agent-sandbox
        env:
        - name: SYSTEM_TOKEN
          value: "sys-your-admin-token"
        - name: API_TOKENS_RAW
          value: "user1-abc123,user2-def456"
        - name: SANDBOX_NAMESPACE
          value: "agent-sandbox"

Reference¶