From 738ad9ec067082e8447d95b6965f52824d3cade2 Mon Sep 17 00:00:00 2001
From: Bryce <blewis@cycle.io>
Date: Mon, 2 Feb 2026 06:57:01 -0800
Subject: [PATCH] environment limited public settings

---
 components/schemas/containers/config/ContainerNetwork.yml    | 5 +++--
 .../vms/config/network/VirtualMachineNetworkConfig.yml       | 1 +
 platform/paths/containers/containers.yml                     | 2 +-
 stackspec/schema/StackSpecContainerConfigNetwork.yml         | 1 +
 4 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/components/schemas/containers/config/ContainerNetwork.yml b/components/schemas/containers/config/ContainerNetwork.yml
index 56403356..3b6fee9d 100644
--- a/components/schemas/containers/config/ContainerNetwork.yml
+++ b/components/schemas/containers/config/ContainerNetwork.yml
@@ -11,6 +11,7 @@ properties:
     enum:
       - enable
       - egress-only
+      - environment-limited
       - disable
   hostname:
     type: string
@@ -29,9 +30,9 @@ properties:
         properties:
           domains:
             type: array
-            description: | 
+            description: |
               The layer 2 'domains' that this container's instances should bridge to on the host server. 
               If the host has a matching layer 2 NIC configured via a virtual provider ISO, this container's instances 
               will be joined directly to the host's network.
             items:
-              $ref: ../../sdn/L2Domain.yml
\ No newline at end of file
+              $ref: ../../sdn/L2Domain.yml
diff --git a/components/schemas/vms/config/network/VirtualMachineNetworkConfig.yml b/components/schemas/vms/config/network/VirtualMachineNetworkConfig.yml
index 1f583114..111b44dc 100644
--- a/components/schemas/vms/config/network/VirtualMachineNetworkConfig.yml
+++ b/components/schemas/vms/config/network/VirtualMachineNetworkConfig.yml
@@ -13,6 +13,7 @@ properties:
       - enable
       - disable
       - egress-only
+      - environment-limited
     description: Controls the public network mode for the virtual machine.
   hostname:
     type: string
diff --git a/platform/paths/containers/containers.yml b/platform/paths/containers/containers.yml
index 9f3d05ec..86fd338e 100644
--- a/platform/paths/containers/containers.yml
+++ b/platform/paths/containers/containers.yml
@@ -78,7 +78,7 @@ get:
           public_network:
             type: string
             description: |
-              `filter[public_network]=value` public network filtering will allow you to filter by the containers network settings: `enabled`, `disabled`, `egress-only`.
+              `filter[public_network]=value` public network filtering will allow you to filter by the containers network settings: `enabled`, `disabled`, `egress-only`, `environment-limited`.
           image:
             type: string
             description: |
diff --git a/stackspec/schema/StackSpecContainerConfigNetwork.yml b/stackspec/schema/StackSpecContainerConfigNetwork.yml
index 66e310db..5c8ab2cc 100644
--- a/stackspec/schema/StackSpecContainerConfigNetwork.yml
+++ b/stackspec/schema/StackSpecContainerConfigNetwork.yml
@@ -14,6 +14,7 @@ properties:
           - enable
           - disable
           - egress-only
+          - environment-limited
       - $ref: StackVariable.yml
   hostname:
     description: The hostname of the container. This is how it can be referenced by other containers in the same environment.