Egress
Named, reusable egress policies and the proxy's allow/deny audit trail.
postCreate Egress Policy
Creates a named, reusable egress policy in a namespace that jobs, sandboxes and Apps can reference by id. name and policy are required (InvalidArgument). **Access:** namespace OPERATOR or above (write)
postDelete Egress Policy
Deletes a named egress policy. **Access:** namespace OPERATOR or above (write)
postGet Egress Policy
Returns one named egress policy. NotFound for an unknown id. **Access:** namespace VIEWER or above (read)
postList Egress Events
Lists egress proxy decisions (allowed and denied) from the audit trail, newest first, optionally narrowed to one job/sandbox (principal_id) and to events at or after since_unix (0 means everything retained). page_size defaults to 100 and is clamped to 1000. Unimplemented when the event feed is not enabled. **Access:** namespace VIEWER or above (read). `namespace` is required unless the caller is a platform admin, for whom empty covers every namespace.
postList Egress Policies
Lists named egress policies, most recently updated first. page_size defaults to 100 and is clamped to 1000. **Access:** namespace VIEWER or above (read). `namespace` is required unless the caller is a platform admin, for whom empty covers every namespace.
postStream Egress Events
Streams egress proxy decisions live, optionally narrowed to one job/sandbox. When since_unix is set, history from that time is replayed first; clients dedupe the overlap by event_id. Unimplemented when the event feed is not enabled. **Access:** namespace VIEWER or above (read). `namespace` is required unless the caller is a platform admin, for whom empty covers every namespace.
postUpdate Egress Policy
Renames and/or replaces a named policy. An empty name or unset policy leaves that part unchanged. **Access:** namespace OPERATOR or above (write)
Write Console POST
Sends stdin to a session without holding a stream and returns the ring's tail offset after the write, so the caller can read back only this input's output. The in-pod daemon reads at most 1 MiB per write. FailedPrecondition for an exited or lost session. **Access:** namespace OPERATOR or above (write)
Create Egress Policy POST
Creates a named, reusable egress policy in a namespace that jobs, sandboxes and Apps can reference by id. name and policy are required (InvalidArgument). **Access:** namespace OPERATOR or above (write)