Get sandbox logs

Sandbox identifier.

• Single-cluster: a bare UUID v7 such as 5de15c92-8fb5-440f-a9ea-7f62f734f1b9.
• Cross-cluster: a {clusterID}.{uuid} composite such as cluster1.5de15c92-8fb5-440f-a9ea-7f62f734f1b9 (dot-separated). The clusterID prefix tells the gateway which Worker cluster owns this sandbox; the server parses it out transparently. Discover valid cluster IDs via GET /clusters.

Because of the composite form, this field is NOT a strict RFC 4122 UUID — clients must treat it as an opaque string. Parsing reference: pkg/utils/cluster/sandbox_id.go::SplitSandboxID.

Which container's log to read. Defaults to the sandbox's own container — a Pod also runs the egress proxy and the injector init containers, whose output is the platform's rather than the user's, and the proxy logs a line per connection it evaluates. Name any container from containers in the response to read that one instead; an unknown name is a 400.

Return only the last N lines. 0 or absent means return all lines.

Log source selector.

• Omit or "stdout": return container stdout/stderr (default behavior)
• "<runtime_name>": read the runtime's log file (logDir) via exec inside the container. Only available for Running sandboxes with a matching runtime that has logDir set.