feat(blueprint): Set cilium network policy on blueprint build (#7006)

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 103
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai%2Frunloop-8ebd9dbfacb180ec9c980f5e46a814b0c8a3cb6063136db18780271d33a8dfa6.yml
-openapi_spec_hash: 12d4edec72b722945bade9419636d63e
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/runloop-ai%2Frunloop-eac4defbf39825fa88e0be11955be80cd004bcea46398be52f79800570539be0.yml
+openapi_spec_hash: d18585a489895642807922dfa558226d
 config_hash: ec63e62d4660c9c924b39a8671c2fdb1

src/resources/blueprints.ts

@@ -251,6 +251,12 @@ export interface BlueprintBuildFromInspectionParameters {
    */
   metadata?: { [key: string]: string } | null;
 
+  /**
+   * (Optional) ID of the network policy to apply during blueprint build. This
+   * restricts network access during the build process.
+   */
+  network_policy_id?: string | null;
+
   /**
    * (Optional) Map of mount IDs/environment variable names to secret names. Secrets
    * can be used as environment variables in system_setup_commands. Example:
@@ -348,6 +354,15 @@ export interface BlueprintBuildParameters {
    */
   metadata?: { [key: string]: string } | null;
 
+  /**
+   * (Optional) ID of the network policy to apply during blueprint build. This
+   * restricts network access during the build process. This does not affect devboxes
+   * created from this blueprint; if you want devboxes created from this blueprint to
+   * inherit the network policy, set the network_policy_id on the blueprint launch
+   * parameters.
+   */
+  network_policy_id?: string | null;
+
   /**
    * (Optional) Map of mount IDs/environment variable names to secret names. Secrets
    * will be available to commands during the build. Secrets are NOT stored in the
@@ -657,6 +672,15 @@ export interface BlueprintCreateParams {
    */
   metadata?: { [key: string]: string } | null;
 
+  /**
+   * (Optional) ID of the network policy to apply during blueprint build. This
+   * restricts network access during the build process. This does not affect devboxes
+   * created from this blueprint; if you want devboxes created from this blueprint to
+   * inherit the network policy, set the network_policy_id on the blueprint launch
+   * parameters.
+   */
+  network_policy_id?: string | null;
+
   /**
    * (Optional) Map of mount IDs/environment variable names to secret names. Secrets
    * will be available to commands during the build. Secrets are NOT stored in the
@@ -782,6 +806,12 @@ export interface BlueprintCreateFromInspectionParams {
    */
   metadata?: { [key: string]: string } | null;
 
+  /**
+   * (Optional) ID of the network policy to apply during blueprint build. This
+   * restricts network access during the build process.
+   */
+  network_policy_id?: string | null;
+
   /**
    * (Optional) Map of mount IDs/environment variable names to secret names. Secrets
    * can be used as environment variables in system_setup_commands. Example:
@@ -862,6 +892,15 @@ export interface BlueprintPreviewParams {
    */
   metadata?: { [key: string]: string } | null;
 
+  /**
+   * (Optional) ID of the network policy to apply during blueprint build. This
+   * restricts network access during the build process. This does not affect devboxes
+   * created from this blueprint; if you want devboxes created from this blueprint to
+   * inherit the network policy, set the network_policy_id on the blueprint launch
+   * parameters.
+   */
+  network_policy_id?: string | null;
+
   /**
    * (Optional) Map of mount IDs/environment variable names to secret names. Secrets
    * will be available to commands during the build. Secrets are NOT stored in the

src/resources/devboxes/devboxes.ts

@@ -821,6 +821,11 @@ export interface DevboxView {
    */
   name?: string | null;
 
+  /**
+   * The network policy ID used to create the Devbox.
+   */
+  network_policy_id?: string | null;
+
   /**
    * The shutdown reason if the Devbox shutdown, if the Devbox has a 'shutdown'
    * status.
@@ -960,12 +965,6 @@ export interface DevboxCreateParams {
    */
   name?: string | null;
 
-  /**
-   * (Optional) ID of the network policy to apply to this Devbox. If not specified,
-   * the default network policy will be used.
-   */
-  network_policy_id?: string | null;
-
   /**
    * Repository connection id the devbox should source its base image from.
    */

tests/api-resources/blueprints.test.ts

@@ -52,6 +52,7 @@ describe('resource blueprints', () => {
         user_parameters: { uid: 0, username: 'username' },
       },
       metadata: { foo: 'string' },
+      network_policy_id: 'network_policy_id',
       secrets: { foo: 'string' },
       services: [
         {
@@ -195,6 +196,7 @@ describe('resource blueprints', () => {
         user_parameters: { uid: 0, username: 'username' },
       },
       metadata: { foo: 'string' },
+      network_policy_id: 'network_policy_id',
       secrets: { foo: 'string' },
       system_setup_commands: ['string'],
     });
@@ -293,6 +295,7 @@ describe('resource blueprints', () => {
         user_parameters: { uid: 0, username: 'username' },
       },
       metadata: { foo: 'string' },
+      network_policy_id: 'network_policy_id',
       secrets: { foo: 'string' },
       services: [
         {

tests/api-resources/devboxes/devboxes.test.ts

@@ -69,7 +69,6 @@ describe('resource devboxes', () => {
             },
           ],
           name: 'name',
-          network_policy_id: 'network_policy_id',
           repo_connection_id: 'repo_connection_id',
           secrets: { foo: 'string' },
           snapshot_id: 'snapshot_id',