okustera_ai_agent_sandbox (Resource)

The okustera_ai_agent_sandbox resource provisions an isolated gVisor (runsc) Linux Agent Sandbox in Okustera AI PaaS, enforcing all 8 mandatory security controls: persistent Ceph RBD /workspace, bounded non-root (10001:10001) Bash execution, preloaded certified toolchains, Cilium L7 network isolation (blocking IMDS and RFC 1918 undercloud planes), read-only /opt/skills/ mounts, and Barbican-backed MCP integrations.

Example Usage

resource "okustera_ai_agent_sandbox" "secops_agent" {
  name              = "secops-audit-sandbox"
  approach          = "infrastructure-first"
  model             = "qwen2.5-coder:1.5b"
  toolchain_profile = "ai-agent-full"
  workspace_size_gb = 20
  storage_class     = "ceph-rbd"
  ttl_minutes       = 120

  enabled_skills = [
    "omc-security-guardian",
    "endpoint-exposure-guard"
  ]

  allowed_domains = [
    "api.github.com",
    "registry.terraform.io"
  ]

  integrations = [
    {
      name             = "qdrant-rag"
      integration_type = "mcp"
      endpoint_url     = "http://qdrant.omc-ai.svc:6333"
      secret_ref       = "omc-mcp-qdrant-secret"
      allowed_tools    = ["vector_search", "read_collection"]
    }
  ]
}