Update Egress Policy
Renames and/or replaces a named policy. An empty name or unset policy leaves that part unchanged.
Access: namespace OPERATOR or above (write)
Authorization
BearerAuth A namespace-scoped API key (cpk_…) for machines, or a Xeonr Auth OIDC
token for humans. The key's namespace and role are pinned server-side.
In: header
Header Parameters
Define the version of the Connect protocol
Define the timeout, in ms
Request Body
application/json
1 <= length <= 64empty leaves the name unchanged
length <= 4096unset leaves the policy unchanged
Response Body
application/json
application/json
curl -X POST "https://containers.xeonr.io/containers.api.v1.EgressPolicyService/UpdateEgressPolicy" \ -H "Connect-Protocol-Version: 1" \ -H "Connect-Timeout-Ms: 1000" \ -H "Content-Type: application/json" \ -d '{}'{
"policy": {
"egressPolicyId": "string",
"namespace": "string",
"name": "string",
"policy": {
"mode": "MODE_UNSPECIFIED",
"allow": [
{
"hostPattern": "string",
"ports": [
0
],
"mode": "RULE_MODE_UNSPECIFIED",
"pathPrefixes": [
"string"
],
"methods": [
"string"
],
"maxResponseBytes": "string",
"allowPlainHttp": true
}
],
"presets": [
"string"
],
"allowPlainHttp": true
},
"updatedAtUnix": "string"
}
}{
"code": "not_found",
"message": "string",
"details": [
{
"type": "string",
"value": "string",
"debug": {}
}
]
}Stream Egress Events POST
Streams egress proxy decisions live, optionally narrowed to one job/sandbox. When since_unix is set, history from that time is replayed first; clients dedupe the overlap by event_id. Unimplemented when the event feed is not enabled. **Access:** namespace VIEWER or above (read). `namespace` is required unless the caller is a platform admin, for whom empty covers every namespace.
Environments
The images workloads run on — register a digest-pinned image, or build a content-addressed one from an install spec.