feat(blueprint): Set cilium network policy on blueprint build (#7006)

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 103
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai%2Frunloop-8ebd9dbfacb180ec9c980f5e46a814b0c8a3cb6063136db18780271d33a8dfa6.yml
-openapi_spec_hash: 12d4edec72b722945bade9419636d63e
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai%2Frunloop-eac4defbf39825fa88e0be11955be80cd004bcea46398be52f79800570539be0.yml
+openapi_spec_hash: d18585a489895642807922dfa558226d
 config_hash: ec63e62d4660c9c924b39a8671c2fdb1

src/runloop_api_client/resources/blueprints.py

@@ -136,6 +136,7 @@ def create(
         file_mounts: Optional[Dict[str, str]] | Omit = omit,
         launch_parameters: Optional[LaunchParameters] | Omit = omit,
         metadata: Optional[Dict[str, str]] | Omit = omit,
+        network_policy_id: Optional[str] | Omit = omit,
         secrets: Optional[Dict[str, str]] | Omit = omit,
         services: Optional[Iterable[blueprint_create_params.Service]] | Omit = omit,
         system_setup_commands: Optional[SequenceNotStr[str]] | Omit = omit,
@@ -179,6 +180,12 @@ def create(
 
           metadata: (Optional) User defined metadata for the Blueprint.
 
+          network_policy_id: (Optional) ID of the network policy to apply during blueprint build. This
+              restricts network access during the build process. This does not affect devboxes
+              created from this blueprint; if you want devboxes created from this blueprint to
+              inherit the network policy, set the network_policy_id on the blueprint launch
+              parameters.
+
           secrets: (Optional) Map of mount IDs/environment variable names to secret names. Secrets
               will be available to commands during the build. Secrets are NOT stored in the
               blueprint image. Example: {"DB_PASS": "DATABASE_PASSWORD"} makes the secret
@@ -218,6 +225,7 @@ def create(
                     "file_mounts": file_mounts,
                     "launch_parameters": launch_parameters,
                     "metadata": metadata,
+                    "network_policy_id": network_policy_id,
                     "secrets": secrets,
                     "services": services,
                     "system_setup_commands": system_setup_commands,
@@ -489,6 +497,7 @@ def create_from_inspection(
         file_mounts: Optional[Dict[str, str]] | Omit = omit,
         launch_parameters: Optional[LaunchParameters] | Omit = omit,
         metadata: Optional[Dict[str, str]] | Omit = omit,
+        network_policy_id: Optional[str] | Omit = omit,
         secrets: Optional[Dict[str, str]] | Omit = omit,
         system_setup_commands: Optional[SequenceNotStr[str]] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -516,6 +525,9 @@ def create_from_inspection(
 
           metadata: (Optional) User defined metadata for the Blueprint.
 
+          network_policy_id: (Optional) ID of the network policy to apply during blueprint build. This
+              restricts network access during the build process.
+
           secrets: (Optional) Map of mount IDs/environment variable names to secret names. Secrets
               can be used as environment variables in system_setup_commands. Example:
               {"GITHUB_TOKEN": "gh_secret"} makes 'gh_secret' available as GITHUB_TOKEN.
@@ -541,6 +553,7 @@ def create_from_inspection(
                     "file_mounts": file_mounts,
                     "launch_parameters": launch_parameters,
                     "metadata": metadata,
+                    "network_policy_id": network_policy_id,
                     "secrets": secrets,
                     "system_setup_commands": system_setup_commands,
                 },
@@ -657,6 +670,7 @@ def preview(
         file_mounts: Optional[Dict[str, str]] | Omit = omit,
         launch_parameters: Optional[LaunchParameters] | Omit = omit,
         metadata: Optional[Dict[str, str]] | Omit = omit,
+        network_policy_id: Optional[str] | Omit = omit,
         secrets: Optional[Dict[str, str]] | Omit = omit,
         services: Optional[Iterable[blueprint_preview_params.Service]] | Omit = omit,
         system_setup_commands: Optional[SequenceNotStr[str]] | Omit = omit,
@@ -698,6 +712,12 @@ def preview(
 
           metadata: (Optional) User defined metadata for the Blueprint.
 
+          network_policy_id: (Optional) ID of the network policy to apply during blueprint build. This
+              restricts network access during the build process. This does not affect devboxes
+              created from this blueprint; if you want devboxes created from this blueprint to
+              inherit the network policy, set the network_policy_id on the blueprint launch
+              parameters.
+
           secrets: (Optional) Map of mount IDs/environment variable names to secret names. Secrets
               will be available to commands during the build. Secrets are NOT stored in the
               blueprint image. Example: {"DB_PASS": "DATABASE_PASSWORD"} makes the secret
@@ -733,6 +753,7 @@ def preview(
                     "file_mounts": file_mounts,
                     "launch_parameters": launch_parameters,
                     "metadata": metadata,
+                    "network_policy_id": network_policy_id,
                     "secrets": secrets,
                     "services": services,
                     "system_setup_commands": system_setup_commands,
@@ -783,6 +804,7 @@ async def create(
         file_mounts: Optional[Dict[str, str]] | Omit = omit,
         launch_parameters: Optional[LaunchParameters] | Omit = omit,
         metadata: Optional[Dict[str, str]] | Omit = omit,
+        network_policy_id: Optional[str] | Omit = omit,
         secrets: Optional[Dict[str, str]] | Omit = omit,
         services: Optional[Iterable[blueprint_create_params.Service]] | Omit = omit,
         system_setup_commands: Optional[SequenceNotStr[str]] | Omit = omit,
@@ -826,6 +848,12 @@ async def create(
 
           metadata: (Optional) User defined metadata for the Blueprint.
 
+          network_policy_id: (Optional) ID of the network policy to apply during blueprint build. This
+              restricts network access during the build process. This does not affect devboxes
+              created from this blueprint; if you want devboxes created from this blueprint to
+              inherit the network policy, set the network_policy_id on the blueprint launch
+              parameters.
+
           secrets: (Optional) Map of mount IDs/environment variable names to secret names. Secrets
               will be available to commands during the build. Secrets are NOT stored in the
               blueprint image. Example: {"DB_PASS": "DATABASE_PASSWORD"} makes the secret
@@ -865,6 +893,7 @@ async def create(
                     "file_mounts": file_mounts,
                     "launch_parameters": launch_parameters,
                     "metadata": metadata,
+                    "network_policy_id": network_policy_id,
                     "secrets": secrets,
                     "services": services,
                     "system_setup_commands": system_setup_commands,
@@ -1136,6 +1165,7 @@ async def create_from_inspection(
         file_mounts: Optional[Dict[str, str]] | Omit = omit,
         launch_parameters: Optional[LaunchParameters] | Omit = omit,
         metadata: Optional[Dict[str, str]] | Omit = omit,
+        network_policy_id: Optional[str] | Omit = omit,
         secrets: Optional[Dict[str, str]] | Omit = omit,
         system_setup_commands: Optional[SequenceNotStr[str]] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -1163,6 +1193,9 @@ async def create_from_inspection(
 
           metadata: (Optional) User defined metadata for the Blueprint.
 
+          network_policy_id: (Optional) ID of the network policy to apply during blueprint build. This
+              restricts network access during the build process.
+
           secrets: (Optional) Map of mount IDs/environment variable names to secret names. Secrets
               can be used as environment variables in system_setup_commands. Example:
               {"GITHUB_TOKEN": "gh_secret"} makes 'gh_secret' available as GITHUB_TOKEN.
@@ -1188,6 +1221,7 @@ async def create_from_inspection(
                     "file_mounts": file_mounts,
                     "launch_parameters": launch_parameters,
                     "metadata": metadata,
+                    "network_policy_id": network_policy_id,
                     "secrets": secrets,
                     "system_setup_commands": system_setup_commands,
                 },
@@ -1304,6 +1338,7 @@ async def preview(
         file_mounts: Optional[Dict[str, str]] | Omit = omit,
         launch_parameters: Optional[LaunchParameters] | Omit = omit,
         metadata: Optional[Dict[str, str]] | Omit = omit,
+        network_policy_id: Optional[str] | Omit = omit,
         secrets: Optional[Dict[str, str]] | Omit = omit,
         services: Optional[Iterable[blueprint_preview_params.Service]] | Omit = omit,
         system_setup_commands: Optional[SequenceNotStr[str]] | Omit = omit,
@@ -1345,6 +1380,12 @@ async def preview(
 
           metadata: (Optional) User defined metadata for the Blueprint.
 
+          network_policy_id: (Optional) ID of the network policy to apply during blueprint build. This
+              restricts network access during the build process. This does not affect devboxes
+              created from this blueprint; if you want devboxes created from this blueprint to
+              inherit the network policy, set the network_policy_id on the blueprint launch
+              parameters.
+
           secrets: (Optional) Map of mount IDs/environment variable names to secret names. Secrets
               will be available to commands during the build. Secrets are NOT stored in the
               blueprint image. Example: {"DB_PASS": "DATABASE_PASSWORD"} makes the secret
@@ -1380,6 +1421,7 @@ async def preview(
                     "file_mounts": file_mounts,
                     "launch_parameters": launch_parameters,
                     "metadata": metadata,
+                    "network_policy_id": network_policy_id,
                     "secrets": secrets,
                     "services": services,
                     "system_setup_commands": system_setup_commands,

src/runloop_api_client/resources/devboxes/devboxes.py

@@ -189,7 +189,6 @@ def create(
         metadata: Optional[Dict[str, str]] | Omit = omit,
         mounts: Optional[Iterable[Mount]] | Omit = omit,
         name: Optional[str] | Omit = omit,
-        network_policy_id: Optional[str] | Omit = omit,
         repo_connection_id: Optional[str] | Omit = omit,
         secrets: Optional[Dict[str, str]] | Omit = omit,
         snapshot_id: Optional[str] | Omit = omit,
@@ -236,9 +235,6 @@ def create(
 
           name: (Optional) A user specified name to give the Devbox.
 
-          network_policy_id: (Optional) ID of the network policy to apply to this Devbox. If not specified,
-              the default network policy will be used.
-
           repo_connection_id: Repository connection id the devbox should source its base image from.
 
           secrets: (Optional) Map of environment variable names to secret names. The secret values
@@ -273,7 +269,6 @@ def create(
                     "metadata": metadata,
                     "mounts": mounts,
                     "name": name,
-                    "network_policy_id": network_policy_id,
                     "repo_connection_id": repo_connection_id,
                     "secrets": secrets,
                     "snapshot_id": snapshot_id,
@@ -1732,7 +1727,6 @@ async def create(
         metadata: Optional[Dict[str, str]] | Omit = omit,
         mounts: Optional[Iterable[Mount]] | Omit = omit,
         name: Optional[str] | Omit = omit,
-        network_policy_id: Optional[str] | Omit = omit,
         repo_connection_id: Optional[str] | Omit = omit,
         secrets: Optional[Dict[str, str]] | Omit = omit,
         snapshot_id: Optional[str] | Omit = omit,
@@ -1779,9 +1773,6 @@ async def create(
 
           name: (Optional) A user specified name to give the Devbox.
 
-          network_policy_id: (Optional) ID of the network policy to apply to this Devbox. If not specified,
-              the default network policy will be used.
-
           repo_connection_id: Repository connection id the devbox should source its base image from.
 
           secrets: (Optional) Map of environment variable names to secret names. The secret values
@@ -1816,7 +1807,6 @@ async def create(
                     "metadata": metadata,
                     "mounts": mounts,
                     "name": name,
-                    "network_policy_id": network_policy_id,
                     "repo_connection_id": repo_connection_id,
                     "secrets": secrets,
                     "snapshot_id": snapshot_id,

src/runloop_api_client/types/blueprint_build_parameters.py

@@ -91,6 +91,15 @@ class BlueprintBuildParameters(BaseModel):
     metadata: Optional[Dict[str, str]] = None
     """(Optional) User defined metadata for the Blueprint."""
 
+    network_policy_id: Optional[str] = None
+    """(Optional) ID of the network policy to apply during blueprint build.
+
+    This restricts network access during the build process. This does not affect
+    devboxes created from this blueprint; if you want devboxes created from this
+    blueprint to inherit the network policy, set the network_policy_id on the
+    blueprint launch parameters.
+    """
+
     secrets: Optional[Dict[str, str]] = None
     """(Optional) Map of mount IDs/environment variable names to secret names.
 

src/runloop_api_client/types/blueprint_create_from_inspection_params.py

@@ -32,6 +32,12 @@ class BlueprintCreateFromInspectionParams(TypedDict, total=False):
     metadata: Optional[Dict[str, str]]
     """(Optional) User defined metadata for the Blueprint."""
 
+    network_policy_id: Optional[str]
+    """(Optional) ID of the network policy to apply during blueprint build.
+
+    This restricts network access during the build process.
+    """
+
     secrets: Optional[Dict[str, str]]
     """(Optional) Map of mount IDs/environment variable names to secret names.
 

src/runloop_api_client/types/blueprint_create_params.py

@@ -51,6 +51,15 @@ class BlueprintCreateParams(TypedDict, total=False):
     metadata: Optional[Dict[str, str]]
     """(Optional) User defined metadata for the Blueprint."""
 
+    network_policy_id: Optional[str]
+    """(Optional) ID of the network policy to apply during blueprint build.
+
+    This restricts network access during the build process. This does not affect
+    devboxes created from this blueprint; if you want devboxes created from this
+    blueprint to inherit the network policy, set the network_policy_id on the
+    blueprint launch parameters.
+    """
+
     secrets: Optional[Dict[str, str]]
     """(Optional) Map of mount IDs/environment variable names to secret names.
 

src/runloop_api_client/types/blueprint_preview_params.py

@@ -51,6 +51,15 @@ class BlueprintPreviewParams(TypedDict, total=False):
     metadata: Optional[Dict[str, str]]
     """(Optional) User defined metadata for the Blueprint."""
 
+    network_policy_id: Optional[str]
+    """(Optional) ID of the network policy to apply during blueprint build.
+
+    This restricts network access during the build process. This does not affect
+    devboxes created from this blueprint; if you want devboxes created from this
+    blueprint to inherit the network policy, set the network_policy_id on the
+    blueprint launch parameters.
+    """
+
     secrets: Optional[Dict[str, str]]
     """(Optional) Map of mount IDs/environment variable names to secret names.
 

src/runloop_api_client/types/devbox_create_params.py

@@ -49,12 +49,6 @@ class DevboxBaseCreateParams(TypedDict, total=False):
     name: Optional[str]
     """(Optional) A user specified name to give the Devbox."""
 
-    network_policy_id: Optional[str]
-    """(Optional) ID of the network policy to apply to this Devbox.
-
-    If not specified, the default network policy will be used.
-    """
-
     repo_connection_id: Optional[str]
     """Repository connection id the devbox should source its base image from."""
 

src/runloop_api_client/types/devbox_view.py

@@ -87,6 +87,9 @@ class DevboxView(BaseModel):
     name: Optional[str] = None
     """The name of the Devbox."""
 
+    network_policy_id: Optional[str] = None
+    """The network policy ID used to create the Devbox."""
+
     shutdown_reason: Optional[Literal["api_shutdown", "keep_alive_timeout", "entrypoint_exit", "idle"]] = None
     """
     The shutdown reason if the Devbox shutdown, if the Devbox has a 'shutdown'

tests/api_resources/test_blueprints.py

@@ -71,6 +71,7 @@ def test_method_create_with_all_params(self, client: Runloop) -> None:
                 },
             },
             metadata={"foo": "string"},
+            network_policy_id="network_policy_id",
             secrets={"foo": "string"},
             services=[
                 {
@@ -284,6 +285,7 @@ def test_method_create_from_inspection_with_all_params(self, client: Runloop) ->
                 },
             },
             metadata={"foo": "string"},
+            network_policy_id="network_policy_id",
             secrets={"foo": "string"},
             system_setup_commands=["string"],
         )
@@ -437,6 +439,7 @@ def test_method_preview_with_all_params(self, client: Runloop) -> None:
                 },
             },
             metadata={"foo": "string"},
+            network_policy_id="network_policy_id",
             secrets={"foo": "string"},
             services=[
                 {
@@ -534,6 +537,7 @@ async def test_method_create_with_all_params(self, async_client: AsyncRunloop) -
                 },
             },
             metadata={"foo": "string"},
+            network_policy_id="network_policy_id",
             secrets={"foo": "string"},
             services=[
                 {
@@ -747,6 +751,7 @@ async def test_method_create_from_inspection_with_all_params(self, async_client:
                 },
             },
             metadata={"foo": "string"},
+            network_policy_id="network_policy_id",
             secrets={"foo": "string"},
             system_setup_commands=["string"],
         )
@@ -900,6 +905,7 @@ async def test_method_preview_with_all_params(self, async_client: AsyncRunloop)
                 },
             },
             metadata={"foo": "string"},
+            network_policy_id="network_policy_id",
             secrets={"foo": "string"},
             services=[
                 {