List cluster access policy proposals
import requests
url = "https://platform.ankra.app/api/v1/org/cluster-access-policy/proposals"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://platform.ankra.app/api/v1/org/cluster-access-policy/proposals', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request GET \
--url https://platform.ankra.app/api/v1/org/cluster-access-policy/proposals \
--header 'Authorization: Bearer <token>'{
"proposals": [
{
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"status": "pending",
"proposed": {
"creator_grant_role": "none",
"max_grant_role": "view",
"elevated_max_ttl_seconds": 15768030,
"require_reason_from_role": "view"
},
"base": {
"creator_grant_role": "none",
"max_grant_role": "view",
"elevated_max_ttl_seconds": 15768030,
"require_reason_from_role": "view",
"is_configured": true
},
"current": {
"creator_grant_role": "none",
"max_grant_role": "view",
"elevated_max_ttl_seconds": 15768030,
"require_reason_from_role": "view",
"is_configured": true
},
"base_matches_current": true,
"reason": "<string>",
"proposed_by": {
"user_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"principal": "<string>",
"token_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"token_name": "<string>"
},
"created_at": "2023-11-07T05:31:56Z",
"expires_at": "2023-11-07T05:31:56Z",
"decided_by_user_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"decided_at": "2023-11-07T05:31:56Z",
"decision_note": "<string>",
"apply_url": "<string>"
}
],
"is_capped": true
}{
"detail": "Cluster not found"
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>"
}
]
}Cluster Access
List cluster access policy proposals
The organisation’s cluster access policy proposals, newest first (at most 20; is_capped says when more matched). status filters by the status a proposal reads as: a pending proposal past its expiry reads as expired. Readable with kube_access.manage, kube_access.policy or kube_access.elevate, like the policy itself.
GET
/
api
/
v1
/
org
/
cluster-access-policy
/
proposals
List cluster access policy proposals
import requests
url = "https://platform.ankra.app/api/v1/org/cluster-access-policy/proposals"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://platform.ankra.app/api/v1/org/cluster-access-policy/proposals', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request GET \
--url https://platform.ankra.app/api/v1/org/cluster-access-policy/proposals \
--header 'Authorization: Bearer <token>'{
"proposals": [
{
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"status": "pending",
"proposed": {
"creator_grant_role": "none",
"max_grant_role": "view",
"elevated_max_ttl_seconds": 15768030,
"require_reason_from_role": "view"
},
"base": {
"creator_grant_role": "none",
"max_grant_role": "view",
"elevated_max_ttl_seconds": 15768030,
"require_reason_from_role": "view",
"is_configured": true
},
"current": {
"creator_grant_role": "none",
"max_grant_role": "view",
"elevated_max_ttl_seconds": 15768030,
"require_reason_from_role": "view",
"is_configured": true
},
"base_matches_current": true,
"reason": "<string>",
"proposed_by": {
"user_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"principal": "<string>",
"token_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"token_name": "<string>"
},
"created_at": "2023-11-07T05:31:56Z",
"expires_at": "2023-11-07T05:31:56Z",
"decided_by_user_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"decided_at": "2023-11-07T05:31:56Z",
"decision_note": "<string>",
"apply_url": "<string>"
}
],
"is_capped": true
}{
"detail": "Cluster not found"
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>"
}
]
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Query Parameters
Available options:
pending, applied, dismissed, expired, superseded