https://github.com/cloud-gov/sandbox-bot

Automatically create sandbox spaces for users based on an allowlist
https://github.com/cloud-gov/sandbox-bot

Last synced: 6 months ago
JSON representation

Automatically create sandbox spaces for users based on an allowlist

• Host: GitHub
• URL: https://github.com/cloud-gov/sandbox-bot
• Owner: cloud-gov
• License: other
• Created: 2015-10-22T22:19:24.000Z (over 10 years ago)
• Default Branch: main
• Last Pushed: 2025-09-17T19:33:35.000Z (10 months ago)
• Last Synced: 2025-09-17T21:41:07.139Z (10 months ago)
• Language: Ruby
• Homepage:
• Size: 160 KB
• Stars: 2
• Watchers: 13
• Forks: 3
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE.md
  • Codeowners: CODEOWNERS
  • Security: SECURITY.md

Awesome Lists containing this project

README

          
# cg-sandbox-bot

[![Code Climate](https://codeclimate.com/github/cloud-gov/cg-sandbox-bot/badges/gpa.svg)](https://codeclimate.com/github/18F/cg-sandbox-bot)

Monitor Cloud Foundry Cloud Controller users and create a sandbox space for known domains.

The sandbox bot monitors the cloud.gov UAA (User Account and Authentication) server for new accounts.

If a new account is created with an email address at a federal domain name ([using this list](https://raw.githubusercontent.com/cisagov/dotgov-data/main/current-federal.csv)), it will automically create a user space within that

organization in cloud.gov - creating a new organization if one does not already exist.

See also: https://github.com/cloud-gov/cg-sandbox - which purges sandbox resources.

## Creating UAA client

```shell

uaac client add sandbox-bot \

	--name "UAA Sandbox Monitor" \

	--scope "cloud_controller.admin, cloud_controller.read, cloud_controller.write, openid, scim.read" \

	--authorized_grant_types "authorization_code, client_credentials, refresh_token" \

	-s [your-client-secret]

```

## Public domain

This project is in the worldwide public domain. As stated in CONTRIBUTING:

> This project is in the public domain within the United States, and copyright

> and related rights in the work worldwide are waived through the CC0 1.0

> Universal public domain dedication.

All contributions to this project will be released under the CC0 dedication. By

submitting a pull request, you are agreeing to comply with this waiver of

copyright interest.