policy
Create a policy
Overview
agent
auditctx
cloudaccount
- GETGet a cloud account by name
- DELDelete an cloud account by name
- PATCHPerform a Patch on a cloud account by name
- GETGet all cloud accounts
- POSTCreate a cloud account
- POSTGet all cloud accounts based on a query
- GETGet the access report for a cloud account by name
- GETGet available permissions for a cloud account resource type
domain
group
gvc
identity
- GETGet an identity by GVC and name
- DELDelete an identity by GVC and name
- PATCHPerform a Patch on an identity by name
- GETGet all identities in a GVC
- POSTCreate an identity
- GETGet all identities from all GVCs
- POSTGet all GVC identities based on a query
- GETGet the access report for an identity by GVC and name
- GETGet available permissions for an identity
image
location
org
policy
quota
secret
- GETGet a secret by name
- DELDelete a secret by name
- PATCHPerform a Patch on a secret by name
- GETGet all secrets
- POSTCreate a secret
- GETGet the sensitive content of a secret by name
- POSTGet all secrets based on a query
- GETGet the access report for a secret by name
- GETGet available permissions for a secret resource type
serviceaccount
- GETGet a service account by name
- DELDelete a service account by name
- PATCHPerform a Patch on a service account by name
- GETGet all service accounts
- POSTCreate a service account
- POSTGet all service accounts based on a query
- GETGet the access report for a service account by name
- POSTAdd a key to a service account
- GETGet available permissions for a service account resource type
task
user
volumeset
- GETGet a volumeset by GVC and name
- DELDelete a volumeset by name
- PATCHPerform a Patch on a volumeset by name
- GETList volumesets in a GVC you are authorized to view
- POSTCreate a volumeset
- GETGet all volumesets
- POSTGet all volumesets based on a query
- GETGet the access report for a volumeset by GVC and name
- GETGet available permissions for a volumeset resource type
workload
- GETGet a workload by GVC and name
- DELDelete a workload by name
- PATCHPerform a Patch on a workload by name
- GETGet a deployment by GVC, workload and name
- GETList workloads in a GVC you are authorized to view
- POSTCreate a workload
- GETGet all workloads
- GETList deployments in a workload
- POSTGet all workloads based on a query
- GETGet the access report for a workload by GVC and name
- GETGet available permissions for a workload resource type
policy
Create a policy
POST
/
org
/
{org}
/
policy
Authorization
string
*
Authorization
Required
string
Service account key can be used as API keys
org
string
*
org
Required
string
object
description
string
description
string
tags
object
tags
object
targetKind
enum<string>
targetKind
enum<string>
targetLinks
array
targetLinks
array
targetQuery
object
targetQuery
object
kind
string
kind
string
spec
object
spec
object
match
enum<string>
match
enum<string>
terms
array
terms
array
sort
object
sort
object
by
string
by
string
order
enum<string>
order
enum<string>
target
enum<string>
target
enum<string>
bindings
array
bindings
array
Authorizations
Authorization
string
headerrequiredService account key can be used as API keys
Path Parameters
org
string
requiredBody
application/json
description
string
Maximum length:
250tags
object
targetKind
enum<string>
Available options:
org, cloudaccount, policy, user, group, resource, task, permissions, serviceaccount, secret, location, gvc, workload, quota, identity, deployment, event, domain, image, ipset, resourcepolicy, agent, accessreport, policymembership, dbcluster, auditctx, memcachecluster, spicedbcluster, tenant, mk8s, command, imagesummary, volumeset targetLinks
string[]
targetQuery
object
target
enum<string>
Available options:
all bindings
object[]
Response
201 - application/json
The response is of type any.