Xeonr Developer Docs
API SpecificationEgress

List Egress Policies

POST
/containers.api.v1.EgressPolicyService/ListEgressPolicies

Lists named egress policies, most recently updated first. page_size defaults to 100 and is clamped to 1000.

Access: namespace VIEWER or above (read). namespace is required unless the caller is a platform admin, for whom empty covers every namespace.

Authorization

BearerAuth
AuthorizationBearer <token>

A namespace-scoped API key (cpk_…) for machines, or a Xeonr Auth OIDC token for humans. The key's namespace and role are pinned server-side.

In: header

Header Parameters

Connect-Protocol-Version?number

Define the version of the Connect protocol

Connect-Timeout-Ms?number

Define the timeout, in ms

Request Body

application/json

namespace?string

Required for everyone but a platform administrator, for whom empty lists every namespace.

Lengthlength <= 64
pageSize?integer

validate:skip clamped server-side to 1000; 0 means 100

pageToken?string
[key: string]?never

Response Body

application/json

application/json

curl -X POST "https://containers.xeonr.io/containers.api.v1.EgressPolicyService/ListEgressPolicies" \  -H "Connect-Protocol-Version: 1" \  -H "Connect-Timeout-Ms: 1000" \  -H "Content-Type: application/json" \  -d '{}'
{
  "policies": [
    {
      "egressPolicyId": "string",
      "namespace": "string",
      "name": "string",
      "policy": {
        "mode": "MODE_UNSPECIFIED",
        "allow": [
          {
            "hostPattern": "string",
            "ports": [
              0
            ],
            "mode": "RULE_MODE_UNSPECIFIED",
            "pathPrefixes": [
              "string"
            ],
            "methods": [
              "string"
            ],
            "maxResponseBytes": "string",
            "allowPlainHttp": true
          }
        ],
        "presets": [
          "string"
        ],
        "allowPlainHttp": true
      },
      "updatedAtUnix": "string"
    }
  ],
  "nextPageToken": "string",
  "total": 0
}
{
  "code": "not_found",
  "message": "string",
  "details": [
    {
      "type": "string",
      "value": "string",
      "debug": {}
    }
  ]
}

List Egress Events POST

Lists egress proxy decisions (allowed and denied) from the audit trail, newest first, optionally narrowed to one job/sandbox (principal_id) and to events at or after since_unix (0 means everything retained). page_size defaults to 100 and is clamped to 1000. Unimplemented when the event feed is not enabled. **Access:** namespace VIEWER or above (read). `namespace` is required unless the caller is a platform admin, for whom empty covers every namespace.

Stream Egress Events POST

Streams egress proxy decisions live, optionally narrowed to one job/sandbox. When since_unix is set, history from that time is replayed first; clients dedupe the overlap by event_id. Unimplemented when the event feed is not enabled. **Access:** namespace VIEWER or above (read). `namespace` is required unless the caller is a platform admin, for whom empty covers every namespace.