mirror of
https://github.com/docker/docs.git
synced 2026-10-28 07:15:09 +03:00
<!--Delete sections as needed --> ## Description Syncs all CLI reference YAML files in `data/sbx_cli/` from `docker/sandboxes` at the v0.35.0 tag. ### New commands | Command | Notes | |---------|-------| | `sbx daemon start/stop/status/log-level` | Manage the sandbox daemon directly | | `sbx policy check network` | Test whether the current policy would allow a request | | `sbx policy inspect` | Inspect a single policy or rule (replaces `sbx policy show`) | | `sbx secret import` | Import credential env vars into the keychain | ### Updated commands | Command | What changed | |---------|--------------| | `sbx rm` | New `--force` flag for active sessions | | `sbx policy ls` | New `--wide`, `--source`, `--decision` filters; updated output format | | `sbx policy` | Updated `see_also` to list new subcommands | | `sbx secret` | Updated `see_also` to list `import` subcommand | | `sbx kit add` | Synopsis and description reflect swap-recreate behavior | ## Related issues or tickets <!-- Related issues, pull requests, or Jira tickets --> ## Reviews <!-- Notes for reviewers here --> <!-- List applicable reviews (optionally @tag reviewers) --> - [ ] Technical review - [ ] Editorial review - [ ] Product review Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
39 lines
1.3 KiB
YAML
39 lines
1.3 KiB
YAML
name: sbx policy check network
|
|
synopsis: Check network access to a host
|
|
description: |-
|
|
Check whether current policy allows network access to TARGET.
|
|
|
|
TARGET may be a hostname, host:port, IP literal, or URL. Bare hosts and IP
|
|
literals are evaluated with port 443. HTTP(S) URLs use their default ports;
|
|
other URL schemes must include an explicit port.
|
|
usage: sbx policy check network [--sandbox SANDBOX] TARGET [flags]
|
|
options:
|
|
- name: help
|
|
shorthand: h
|
|
default_value: "false"
|
|
usage: help for network
|
|
- name: json
|
|
default_value: "false"
|
|
usage: Output in JSON format
|
|
- name: sandbox
|
|
usage: Evaluate in a specific sandbox policy context
|
|
- name: verbose
|
|
default_value: "false"
|
|
usage: Show the exact policy request fields
|
|
inherited_options:
|
|
- name: debug
|
|
shorthand: D
|
|
default_value: "false"
|
|
usage: Enable debug logging
|
|
example: |4-
|
|
# Check global network policy
|
|
sbx policy check network api.example.com
|
|
|
|
# Check policy in a sandbox context
|
|
sbx policy check network --sandbox my-sandbox api.example.com:443
|
|
|
|
# Check a pasted URL and output JSON
|
|
sbx policy check network --json https://api.example.com/v1
|
|
see_also:
|
|
- sbx policy check - Check whether policy allows an access request
|