Edge Intelligence sandbox00

Service directory for the sandbox00 estate. These links only work while your tunnel is running.

Start the tunnel first. Every public port on these hosts is closed — the services are reachable only through an SSM port-forward that pins their hostnames to your machine. Run the tunnel script from your onboarding email, choose an environment, then use the links below.

./eiiotsandbox00-tunnel-<your-name>.sh

One environment at a time: they all use the same ports.

sandbox00

Service	URL	What it is
Omni	omnimain.eiiotsandbox00.com:8080	Cluster management and the dashboards it proxies
Keycloak	keycloak.eiiotsandbox00.com:9443	Single sign-on
Nexus	nexus.eiiotsandbox00.com:8443	Artifact repository

This estate is standalone: it shares no state, GitOps repository or credentials with any other. Only sandbox00 services are listed here, and the names come from this stack’s own configuration rather than from another environment.

Why the ports are in the URLs

The SSM document requires the local port to match the remote one, and these services listen on 8080/9443/8443 rather than 443. Keycloak's redirect URIs carry the port to match, so removing it would break sign-in.

If a link fails

Symptom	Cause
Connection refused	No tunnel running, or you tunnelled a different environment
Certificate warning	The hostname is not pinned — the tunnel script does this, and undoes it on exit
`AccessDenied` starting the tunnel	MFA device not enrolled, or you lack the grant for that environment

Edit this page in infra/edge-l1-landing/www/index.html in pd-edge-intelligence.