1
0
mirror of https://github.com/docker/docs.git synced 2026-10-28 07:15:09 +03:00
Files
docs/data/sbx_cli/sbx_policy_check_network.yaml
Craig Osterhout 27e3346a3a sbx: sync cli ref for 0.35.0 (#25532)
<!--Delete sections as needed -->

## Description

Syncs all CLI reference YAML files in `data/sbx_cli/` from
`docker/sandboxes` at the v0.35.0 tag.

### New commands

| Command | Notes |
|---------|-------|
| `sbx daemon start/stop/status/log-level` | Manage the sandbox daemon
directly |
| `sbx policy check network` | Test whether the current policy would
allow a request |
| `sbx policy inspect` | Inspect a single policy or rule (replaces `sbx
policy show`) |
| `sbx secret import` | Import credential env vars into the keychain |

### Updated commands

| Command | What changed |
|---------|--------------|
| `sbx rm` | New `--force` flag for active sessions |
| `sbx policy ls` | New `--wide`, `--source`, `--decision` filters;
updated output format |
| `sbx policy` | Updated `see_also` to list new subcommands |
| `sbx secret` | Updated `see_also` to list `import` subcommand |
| `sbx kit add` | Synopsis and description reflect swap-recreate
behavior |

## Related issues or tickets

<!-- Related issues, pull requests, or Jira tickets -->

## Reviews

<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->

- [ ] Technical review
- [ ] Editorial review
- [ ] Product review

Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
2026-07-10 10:44:45 -07:00

39 lines
1.3 KiB
YAML

name: sbx policy check network
synopsis: Check network access to a host
description: |-
Check whether current policy allows network access to TARGET.
TARGET may be a hostname, host:port, IP literal, or URL. Bare hosts and IP
literals are evaluated with port 443. HTTP(S) URLs use their default ports;
other URL schemes must include an explicit port.
usage: sbx policy check network [--sandbox SANDBOX] TARGET [flags]
options:
- name: help
shorthand: h
default_value: "false"
usage: help for network
- name: json
default_value: "false"
usage: Output in JSON format
- name: sandbox
usage: Evaluate in a specific sandbox policy context
- name: verbose
default_value: "false"
usage: Show the exact policy request fields
inherited_options:
- name: debug
shorthand: D
default_value: "false"
usage: Enable debug logging
example: |4-
# Check global network policy
sbx policy check network api.example.com
# Check policy in a sandbox context
sbx policy check network --sandbox my-sandbox api.example.com:443
# Check a pasted URL and output JSON
sbx policy check network --json https://api.example.com/v1
see_also:
- sbx policy check - Check whether policy allows an access request