feat(server): support multi ingress gateway mode

[Pangjiping]

Summary

• add ingress config for OpenSandbox server

Ingress exposure (direct | gateway)

[ingress]
mode = "direct"  # docker runtime only supports direct
# gateway.address = "*.example.com"         # host only (domain or IP[:port]); scheme is not allowed
# gateway.route.mode = "wildcard"            # wildcard | uri (header not yet supported)

• mode=direct: default; required when runtime.type=docker (client ↔ sandbox direct reachability, no L7 gateway).
• mode=gateway: configure external ingress.
  • gateway.address: wildcard domain required when gateway.route.mode=wildcard; otherwise must be domain, IP, or IP:port. Do not include scheme; clients decide http/https.
    - gateway.route.mode: wildcard (host-based wildcard), uri (path-prefix). header is not yet supported.
  • Response format examples:
    • wildcard: <sandbox-id>-<port>.example.com/path/to/request
    • uri: 10.0.0.1:8000/<sandbox-id>/<port>/path/to/request

Testing

• Not run (explain why)
• Unit tests
• Integration tests
• e2e / manual verification

Breaking Changes

• None
• Yes (describe impact and migration path)

Checklist

• Linked Issue or clearly described motivation. enhancement for FEATURE: watch sandbox resource by ingress-controller #141
• Added/updated docs (if needed)
• Added/updated tests (if needed)
• Security impact considered
• Backward compatibility considered

[jwx0925]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ff15bdaaf8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".