Get bastion SSH allowlist
import requests
url = "https://platform.ankra.app/api/v1/clusters/hetzner/{cluster_id}/bastion/allowed-ips"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://platform.ankra.app/api/v1/clusters/hetzner/{cluster_id}/bastion/allowed-ips', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request GET \
--url https://platform.ankra.app/api/v1/clusters/hetzner/{cluster_id}/bastion/allowed-ips \
--header 'Authorization: Bearer <token>'{
"node_id": "<string>",
"kind": "<string>",
"name": "<string>",
"bastion_allowed_ips": [
"<string>"
],
"configured": true
}{
"detail": "Cluster not found"
}{
"detail": "Cluster not found"
}{
"detail": "Cluster not found"
}{
"detail": "Cluster not found"
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>"
}
]
}{
"detail": "Cluster not found"
}Hetzner Clusters
Get bastion SSH allowlist
Bearer PAT authentication; RBAC permission clusters.read. Returns the cluster’s stored bastion SSH source allowlist, as the update on the same path stored it. configured tells a cleared list (true, empty) from one that was never set (false, empty); both leave SSH open from anywhere.
GET
/
api
/
v1
/
clusters
/
hetzner
/
{cluster_id}
/
bastion
/
allowed-ips
Get bastion SSH allowlist
import requests
url = "https://platform.ankra.app/api/v1/clusters/hetzner/{cluster_id}/bastion/allowed-ips"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://platform.ankra.app/api/v1/clusters/hetzner/{cluster_id}/bastion/allowed-ips', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request GET \
--url https://platform.ankra.app/api/v1/clusters/hetzner/{cluster_id}/bastion/allowed-ips \
--header 'Authorization: Bearer <token>'{
"node_id": "<string>",
"kind": "<string>",
"name": "<string>",
"bastion_allowed_ips": [
"<string>"
],
"configured": true
}{
"detail": "Cluster not found"
}{
"detail": "Cluster not found"
}{
"detail": "Cluster not found"
}{
"detail": "Cluster not found"
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>"
}
]
}{
"detail": "Cluster not found"
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Headers
PAT organisation override.
Path Parameters
Response
Successful response
The bastion (OVH: gateway) resource id.
The bastion resource kind.
The bastion name.
The stored allowlist, in the normalised form the update stored. Empty means the bastion accepts SSH from anywhere.
True when a list is stored, including an empty one (the allowlist was cleared); false when no list was ever set.