Handle case where network in nil

Author: sitole

packages/orchestrator/internal/proxy/proxy.go

@@ -51,9 +51,13 @@ func NewSandboxProxy(meterProvider metric.MeterProvider, port uint16, sandboxes
 				return nil, reverseproxy.NewErrSandboxNotFound(sandboxId)
 			}
 
+			var accessToken *string = nil
+			if net := sbx.Config.Network; net != nil && net.GetIngress() != nil {
+				accessToken = net.GetIngress().TrafficAccessToken
+			}
+
 			// Handle traffic access token validation.
 			// We are skipping envd port as it has its own access validation mechanism.
-			accessToken := sbx.Config.Network.GetIngress().TrafficAccessToken
 			if accessToken != nil && int64(port) != consts.DefaultEnvdServerPort {
 				accessTokenRaw := r.Header.Get(accessTokenHeader)
 				if accessTokenRaw == "" {