# "User signup": one claim per user. This is the entire per-user resource —
# the platform pattern keeps it deliberately minimal:
#
#   - warmPoolRef ONLY. No spec.env and no spec.volumeClaimTemplates: either
#     would force a cold start past the warm pool (and this template's
#     Disallowed policies reject them outright — see 40-claim-rejected.yaml).
#   - additionalPodMetadata is the one warm-compatible per-claim
#     customization. Label keys must use the sandbox.users.io domain.
apiVersion: extensions.agents.x-k8s.io/v1beta1
kind: SandboxClaim
metadata:
  name: dsh-alice
  namespace: dsh-demo
spec:
  warmPoolRef:
    name: dsh-pool
  additionalPodMetadata:
    labels:
      sandbox.users.io/dsh-user: alice