A computer-implemented method, comprising: receiving , by a computing device operated by a cloud computing provider, a first user request specifying a first set of services to be executed at a first cloud-computing edge device , a cloud-computing edge device being a device configured to selectively execute within an isolated computing environment having no access to a public network while executing within the isolated computing environment; generating , by the computing device based at least in part on the first user request, a first manifest that specifies a first configuration for the first cloud-computing edge device, the first configuration comprising the first set of services, wherein generating the first manifest comprises executing one or more executable scripts individually associated with an artifact corresponding to a service of the first set of services, wherein executing the one or more executable scripts modifies the first manifest to include one or more entity definitions, and wherein each entity definition corresponds to a device or service, and assigning a network address to one or more entities defined within the manifest; provisioning , by the computing device, the first cloud-computing edge device with the first set of services in accordance with the first manifest; receiving , by the computing device, a second user request specifying a second set of services to be executed at a second cloud-computing edge device ; generating , by the computing device based at least in part on the second user request, a second manifest that specifies a second configuration for the second cloud-computing edge device, the second configuration comprising the second set of services; and provisioning , by the computing device, the second cloud-computing edge device with the second set of services in accordance with the second manifest. receiving , by a computing device operated by a cloud computing provider, a first user request specifying a first set of services to be executed at a first cloud-computing edge device , a cloud-computing edge device being a device configured to selectively execute within an isolated computing environment having no access to a public network while executing within the isolated computing environment; generating , by the computing device based at least in part on the first user request, a first manifest that specifies a first configuration for the first cloud-computing edge device, the first configuration comprising the first set of services, wherein generating the first manifest comprises executing one or more executable scripts individually associated with an artifact corresponding to a service of the first set of services, wherein executing the one or more executable scripts modifies the first manifest to include one or more entity definitions, and wherein each entity definition corresponds to a device or service, and assigning a network address to one or more entities defined within the manifest; provisioning , by the computing device, the first cloud-computing edge device with the first set of services in accordance with the first manifest; receiving , by the computing device, a second user request specifying a second set of services to be executed at a second cloud-computing edge device ; generating , by the computing device based at least in part on the second user request, a second manifest that specifies a second configuration for the second cloud-computing edge device, the second configuration comprising the second set of services; and provisioning , by the computing device, the second cloud-computing edge device with the second set of services in accordance with the second manifest. <EOS>