code: func New(id, namespace, name, kubeName, logDir string, labels, annotations map[string]string, processLabel, mountLabel string, metadata *pb.PodSandboxMetadata, shmPath, cgroupParent string, privileged bool, runtimeHandler string, resolvPath, hostname string, portMappings []*hostport.PortMapping, hostNetwork bool) (*Sandbox, error) {
  	sb := new(Sandbox)
  	sb.id = id
  	sb.namespace = namespace
  	sb.name = name
  	sb.kubeName = kubeName
  	sb.logDir = logDir
  	sb.labels = labels
  	sb.annotations = annotations
  	sb.containers = oci.NewMemoryStore()
  	sb.processLabel = processLabel
  	sb.mountLabel = mountLabel
  	sb.metadata = metadata
  	sb.shmPath = shmPath
  	sb.cgroupParent = cgroupParent
  	sb.privileged = privileged
  	sb.runtimeHandler = runtimeHandler
  	sb.resolvPath = resolvPath
  	sb.hostname = hostname
  	sb.portMappings = portMappings
  	sb.createdAt = time.Now()
  	sb.hostNetwork = hostNetwork
  
  	return sb, nil
  }
docs: // New creates and populates a new pod sandbox
  // New sandboxes have no containers, no infra container, and no network namespaces associated with them
  // An infra container must be attached before the sandbox is added to the state